Marc-André Bombeck 989381b3f6 fix(share): stop serving shared documents once the documents module is off ...

A share link gated its report on the doctorReport module but listed and
served its attached documents unconditionally, although the comment beside
the gate said the documents kept a gate of their own. An owner who switched
the documents module off still had every attached file decrypted for anyone
holding the link and its passphrase.

The share page lists no document while the module is off, and the document
route answers 404, the same as for an unknown document, before it looks the
membership up.

2026-10-25 13:52:04 +01:00

..

[token]

fix(share): stop serving shared documents once the documents module is off

2026-10-25 13:52:04 +01:00

error.tsx

feat(sharing): add an error boundary to the public share route

2026-06-28 11:53:52 +02:00