[#114] Added :user_id component to email confirmation path to improve the security.

[akkoma] / lib / pleroma / list.ex

diff --git a/lib/pleroma/list.ex b/lib/pleroma/list.ex
index a99e3245b9fedc90eca575bad87d21df93a5ba9e..c5bf3e0831f0302fc598ebfdbc505e9d6793404a 100644 (file)
--- a/lib/pleroma/list.ex
+++ b/lib/pleroma/list.ex
@@ -23,7 +23,7 @@ defmodule Pleroma.List do
     |> validate_required([:following])
   end
 
-  def for_user(user, opts) do
+  def for_user(user, _opts) do
     query =
       from(
         l in Pleroma.List,
@@ -46,7 +46,7 @@ defmodule Pleroma.List do
     Repo.one(query)
   end
 
-  def get_following(%Pleroma.List{following: following} = list) do
+  def get_following(%Pleroma.List{following: following} = _list) do
     q =
       from(
         u in User,
@@ -72,11 +72,19 @@ defmodule Pleroma.List do
   # Get lists to which the account belongs.
   def get_lists_account_belongs(%User{} = owner, account_id) do
     user = Repo.get(User, account_id)
+
     query =
       from(
         l in Pleroma.List,
-        where: l.user_id == ^owner.id and fragment("? = ANY(?)", ^user.follower_address, l.following)
+        where:
+          l.user_id == ^owner.id and
+            fragment(
+              "? = ANY(?)",
+              ^user.follower_address,
+              l.following
+            )
       )
+
     Repo.all(query)
   end