Extend the pretense of non-existence of self-bans to API view route too

2022-02-02 23:27:54 +03:00 · 2022-02-02 23:27:54 +03:00 · 3e0f568ba4
commit 3e0f568ba4
parent 8b641d099a
1 changed files with 2 additions and 0 deletions
--- a/api/src/routes/guilds/#guild_id/bans.ts
+++ b/api/src/routes/guilds/#guild_id/bans.ts
@ -27,6 +27,8 @@ router.get("/", route({ permission: "BAN_MEMBERS" }), async (req: Request, res:
 	let bans = await Ban.find({ guild_id: guild_id });

 	/* Filter secret from database registry.*/
+	if (banned_user.user_id === banned_user.executor_id) throw DiscordApiErrors.UNKNOWN_BAN;
+	// hide self-bans from view to prevent victim chasing	
 	
 	bans.forEach((registry: BanRegistrySchema) => {
 	delete registry.ip;