fix(server): avoid leaking people data on shared links (#6779)

* fix: avoid leaking people data on shared links

* test: add e2e test
This commit is contained in:
martin 2024-01-30 22:34:00 +01:00 committed by GitHub
parent e90d3a169c
commit 1bfef200a5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 42 additions and 1 deletions

View file

@ -321,7 +321,7 @@ export class AssetService {
delete data.owner;
}
if (data.ownerId !== auth.user.id) {
if (data.ownerId !== auth.user.id || auth.sharedLink) {
data.people = [];
}