yul
/
bookwyrm-mastodon
1
1
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Don't allow remote search results for logged out users

This commit is contained in:
Mouse Reeve 2021-04-30 20:08:05 -07:00
parent 499c4e3267
commit 9caad56ffc
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
bookwyrm/views/search.py
View File

@ -23,7 +23,9 @@ class Search(View):
query = request.GET.get("q") query = request.GET.get("q")
min_confidence = request.GET.get("min_confidence", 0.1) min_confidence = request.GET.get("min_confidence", 0.1)
search_type = request.GET.get("type") search_type = request.GET.get("type")
search_remote = request.GET.get("remote", False) search_remote = (
request.GET.get("remote", False) and request.user.is_authenticated
)
if is_api_request(request): if is_api_request(request):
# only return local book results via json so we don't cascade # only return local book results via json so we don't cascade