Merge pull request #6410 from pixelfed/shleeable-patch-9

Bugfix: Missing status filter exposes suspended/disabled profiles via ActivityPub in getCachedUser(withTrashed)
3 weeks ago · ebb119e4df
parent 2da38b1150 8394b8ac4b
commit ebb119e4df
1 changed files with 1 additions and 1 deletions
--- a/app/Http/Controllers/ProfileController.php
+++ b/app/Http/Controllers/ProfileController.php
@ -163,7 +163,7 @@ class ProfileController extends Controller
                    ->first();
            } else {
                return Profile::withTrashed()
-                    ->whereNull('domain')
+                    ->whereNull(['domain', 'status'])
                    ->whereUsername($username)
                    ->first();
            }