fedserv/echoIRCd
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

mode: require half-op to view the autoop/exemptchanops/filter lists

Browse source
This commit is contained in:
Jean Chevronnet 2026-08-16 18:44:08 +00:00
parent dadbff91d8
commit 94f57608f7
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/coremods/core_mode.rs
View file

@ -101,7 +101,10 @@ pub fn apply_mode(s: &mut Server, uid: Uid, params: &[String]) -> CmdResult {
.chars() .chars()
.filter(|c| *c != '+' && *c != '-') .filter(|c| *c != '+' && *c != '-')
.all(|c| chan_mode(c).is_some_and(|h| h.is_list())); .all(|c| chan_mode(c).is_some_and(|h| h.is_list()));
if !pure_list_query && s.rank(uid, &key) < RANK_HALFOP { // Viewing autoop (+w), exemptchanops (+X) or filter (+g) exposes trusted
// host/pattern lists, so require half-op to read them (public ban lists stay open).
let sensitive_view = pure_list_query && modestring.chars().any(|c| matches!(c, 'w' | 'X' | 'g'));
if (!pure_list_query || sensitive_view) && s.rank(uid, &key) < RANK_HALFOP {
s.numeric( s.numeric(
uid, uid,
ERR_CHANOPRIVSNEEDED, ERR_CHANOPRIVSNEEDED,