pepepper/fluxer
1
0 Fork 0
mirror of https://github.com/fluxerapp/fluxer synced 2026-10-18 05:25:40 +09:00
Code Issues Packages Projects Releases Wiki Activity

fix(privacy): let minors block media in DMs from others (#3120)

Browse Source
This commit is contained in:
Hampus authored and GitHub committed 2026-10-02 17:23:50 +02:00
1 parent 76e6891f5b
commit d87351eefe
3 files changed
+58 -21
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

fluxer_api/src/api/user/services/UserAccountSettingsService.ts
+11 -5
View File
@@ -226,11 +226,17 @@ export class UserAccountSettingsService {
updatedRowData.sensitive_content_friend_dm_filter = data.sensitive_content_friend_dm_filter;
}
if (data.sensitive_content_non_friend_dm_filter !== undefined) {
throw ValidationError.fromPath(
'sensitive_content_non_friend_dm_filter',
'AGE_RESTRICTED',
'Non-adult users cannot modify the non-friend DM content filter',
);
const allowed =
data.sensitive_content_non_friend_dm_filter === SensitiveMediaFilterLevel.BLUR ||
data.sensitive_content_non_friend_dm_filter === SensitiveMediaFilterLevel.BLOCK;
if (!allowed) {
throw ValidationError.fromPath(
'sensitive_content_non_friend_dm_filter',
'AGE_RESTRICTED',
'Non-adult users can only set non-friend DM filter to blur or block',
);
}
updatedRowData.sensitive_content_non_friend_dm_filter = data.sensitive_content_non_friend_dm_filter;
}
if (data.sensitive_content_guild_filter !== undefined) {
throw ValidationError.fromPath(
fluxer_api/src/api/user/tests/UserSettingsSensitiveContentFilter.test.ts
+29
View File
@@ -100,6 +100,35 @@ describe('User Settings - Sensitive Content Filters', () => {
expect(response.errors[0]?.path).toBe('sensitive_content_friend_dm_filter');
expect(response.errors[0]?.code).toBe(ValidationErrorCodes.AGE_RESTRICTED);
});
test('lets a non-adult account tighten the non-friend DM filter', async () => {
const account = await createTestAccount(harness, {dateOfBirth: '2010-01-01'});
const {json} = await updateUserSettings(harness, account.token, {
sensitive_content_non_friend_dm_filter: SensitiveMediaFilterLevel.BLUR,
});
expect(json.sensitive_content_non_friend_dm_filter).toBe(SensitiveMediaFilterLevel.BLUR);
const {json: blocked} = await updateUserSettings(harness, account.token, {
sensitive_content_non_friend_dm_filter: SensitiveMediaFilterLevel.BLOCK,
});
expect(blocked.sensitive_content_non_friend_dm_filter).toBe(SensitiveMediaFilterLevel.BLOCK);
});
test('rejects a non-adult account relaxing the non-friend DM filter', async () => {
const account = await createTestAccount(harness, {dateOfBirth: '2010-01-01'});
const response = await createBuilder<{
code: string;
errors: Array<{
path: string;
code: string;
message: string;
}>;
}>(harness, account.token)
.patch('/users/@me/settings')
.body({sensitive_content_non_friend_dm_filter: SensitiveMediaFilterLevel.SHOW})
.expect(HTTP_STATUS.BAD_REQUEST)
.execute();
expect(response.code).toBe('VALIDATION_ERROR');
expect(response.errors[0]?.path).toBe('sensitive_content_non_friend_dm_filter');
expect(response.errors[0]?.code).toBe(ValidationErrorCodes.AGE_RESTRICTED);
});
test('allows an account without a birth date to relax every filter when none is collected', async () => {
const repository = getInstanceConfigRepository();
const previous = (await repository.getAppPublicConfig()).registration.collect_date_of_birth;