From d6a77d6668477fc894eff3eb35f634936e1134dd Mon Sep 17 00:00:00 2001 From: Matt Baer Date: Sun, 16 Jun 2019 21:16:23 -0400 Subject: [PATCH] Check reader permissions on RSS feed & sitemap (on private instances) Ref T576 --- routes.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/routes.go b/routes.go index a1a04b3..a1f4439 100644 --- a/routes.go +++ b/routes.go @@ -194,8 +194,8 @@ func RouteCollections(handler *Handler, r *mux.Router) { r.HandleFunc("/tag:{tag}", handler.Web(handleViewCollectionTag, UserLevelReader)) r.HandleFunc("/tag:{tag}/feed/", handler.Web(ViewFeed, UserLevelReader)) r.HandleFunc("/tags/{tag}", handler.Web(handleViewCollectionTag, UserLevelReader)) - r.HandleFunc("/sitemap.xml", handler.All(handleViewSitemap)) - r.HandleFunc("/feed/", handler.All(ViewFeed)) + r.HandleFunc("/sitemap.xml", handler.AllReader(handleViewSitemap)) + r.HandleFunc("/feed/", handler.AllReader(ViewFeed)) r.HandleFunc("/{slug}", handler.CollectionPostOrStatic) r.HandleFunc("/{slug}/edit", handler.Web(handleViewPad, UserLevelUser)) r.HandleFunc("/{slug}/edit/meta", handler.Web(handleViewMeta, UserLevelUser))