2 commits

Author	SHA1	Message	Date
johnnyjoygh	415a3ec73d	fix(auth): enforce private instance access boundaries ... - Resolve Gateway procedures from matched HTTP bindings before authorization.\n- Disable anonymous RSS on private instances.\n- Limit share-token access to the shared memo and its attachments.	2026-07-26 21:13:21 +08:00
boojack	4a1e401bd9	fix(memo): enforce parent visibility for comments	2026-05-08 23:22:56 +08:00