Share on a paid episode's file hands over a link signed for you #455
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
On a private feed's episode, Share on the file (the enclosure row) gives the file's own address. Patreon's are
patreon.com/api/rss/u/<your id>/e/<n>.mp3?sig=...: signed for the subscriber, so whoever gets it can download the paid episode as them. Share on the episode itself gives the post page, which asks for a sign-in, and is safe; but the warning (carriesAccess) matches any patreon.com address, so it warns on that too and the two look alike. A private feed's episode should be shared by its page only, and the warning shown only for an address that does carry access.Fixed in
757ce5f: a private feed's episode is shared by its page alone, from its file too; the access warning matches Patreon's feed and file addresses, not a post's page. Deployed in ipx-web.