NodeBB / NodeBB / 29043800284

85%

master: 85%

push

github

fix: filter private category data from crossposts and events

Crossposts.get now accepts a uid parameter and uses privileges.categories.filterCids('find') to filter category metadata and individual crossposts before returning them. Events.get filters out events referencing fromCid/toCid categories the user cannot find. All frontend-facing callers updated to pass uid.

Assisted-by: unsloth/Qwen3.6-35B-A3B-GGUF

14209 of 19351 branches covered (73.43%)

19 of 21 new or added lines in 4 files covered. (90.48%)

29445 of 34471 relevant lines covered (85.42%)

3338.95 hits per line