Close data leaks: remove anonymous user creation, hide private playlists, validate uploads and clamp gateway ranges

2026-09-24 05:00:21 +02:00
parent c8fe28b07b
commit c8e9c7790e
34 changed files with 374 additions and 553 deletions
@@ -14,7 +14,7 @@ export const load: PageServerLoad = async ({ params, locals, url, fetch, parent
 		api.GET('/playlists/users/{userId}', {
 			params: {
 				path: { userId: params.id },
-				query: { pageNumber: 1, pageSize: PROFILE_PLAYLISTS_PAGE_SIZE, onlyPublic: true }
+				query: { pageNumber: 1, pageSize: PROFILE_PLAYLISTS_PAGE_SIZE }
 			}
 		})
 	]);