Check that notes belong to the viewer

2021-02-23 17:35:26 +00:00 · 2021-02-23 17:35:26 +00:00 · 8124a7cdc6
parent 0dbd048a15
commit 8124a7cdc6
1 changed files with 7 additions and 6 deletions
--- a/webapp_person_options.py
+++ b/webapp_person_options.py
@ -351,6 +351,7 @@ def htmlPersonOptions(defaultTimeline: str,
                translate['Info'] + '</button>\n'

        personNotes = ''
+        if originPathStr.startswith('/' + nickname + '/'):
            personNotesFilename = \
                baseDir + '/accounts/' + nickname + '@' + domain + \
                '/notes/' + handle + '.txt'