diff options
| author | Bharat Mediratta <bharat@menalto.com> | 2009-09-21 20:47:55 -0700 |
|---|---|---|
| committer | Bharat Mediratta <bharat@menalto.com> | 2009-09-21 20:47:55 -0700 |
| commit | 9e6be40e31b06e5dffe7552928cb8b2d9ee7ad59 (patch) | |
| tree | f405e4e8c3c9082799370ea65231ba809407111a /lib/flowplayer.js | |
| parent | a6581ede0b7a50c6159eb5d36cf6be340a072609 (diff) | |
Add viewable() protection to children() and children_count() calls.
This is not currently necessary (nor is it a security hole) because we
don't constrain permissions at the child level in the core, but it
makes our security audits easier and will enable the scenario where
somebody writes a module to add per-photo permissions.
Diffstat (limited to 'lib/flowplayer.js')
0 files changed, 0 insertions, 0 deletions