[backend/federation] Only allow fetching of replies collection for local notes

2024-10-20 22:35:42 +02:00 · 2024-10-20 22:35:42 +02:00 · fd7d3eabb2
commit fd7d3eabb2
parent 39ebc7a457
1 changed files with 1 additions and 1 deletions
--- a/Iceshrimp.Backend/Controllers/Federation/ActivityPubController.cs
+++ b/Iceshrimp.Backend/Controllers/Federation/ActivityPubController.cs
@ -85,7 +85,7 @@ public class ActivityPubController(
 		var actor = HttpContext.GetActor();
 		var note = await db.Notes
 		                   .EnsureVisibleFor(actor)
-		                   .FirstOrDefaultAsync(p => p.Id == id) ??
+		                   .FirstOrDefaultAsync(p => p.Id == id && p.User.IsLocalUser) ??
 		           throw GracefulException.NotFound("Note not found");

 		var replies = await db.Notes