Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Prevent posting toots with media attachments from someone else (#9921)

Browse source
This commit is contained in:
ThibG 2019-01-26 23:59:39 +01:00 • committed by Eugen Rochko
parent 9519d55332
commit e2a5be6e9a
2 changed files with 15 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

15
spec/services/post_status_service_spec.rb
View file

@ -167,7 +167,7 @@ RSpec.describe PostStatusService, type: :service do
it 'attaches the given media to the created status' do
account = Fabricate(:account)
media = Fabricate(:media_attachment)
media = Fabricate(:media_attachment, account: account)
status = subject.call(
account,
@ -178,6 +178,19 @@ RSpec.describe PostStatusService, type: :service do
expect(media.reload.status).to eq status
end
it 'does not attach media from another account to the created status' do
account = Fabricate(:account)
media = Fabricate(:media_attachment, account: Fabricate(:account))
status = subject.call(
account,
text: "test status update",
media_ids: [media.id],
)
expect(media.reload.status).to eq nil
end
it 'does not allow attaching more than 4 files' do
account = Fabricate(:account)