Return a 404 instead of an empty page if requesting a non-public post.

1 files changed, 1 insertions, 1 deletions

diff --git a/html.c b/html.c
index 00da602..ed9e739 100644
--- a/html.c
+++ b/html.c
@@ -4174,7 +4174,7 @@ int html_get_handler(const xs_dict *req, const char *q_path,
         xs *id  = xs_fmt("%s/%s", snac.actor, p_path);
         xs *msg = NULL;
 
-        if (valid_status(object_get(id, &msg))) {
+        if (valid_status(object_get(id, &msg)) && is_msg_public(msg)) {
             xs *md5  = xs_md5_hex(id, strlen(id));
             xs *list = xs_list_new();