From 0344ad14c1f997672f81e4d6cbabec6d0dbb1e8d Mon Sep 17 00:00:00 2001
From: David Taylor <david@taylorhq.com>
Date: Tue, 12 May 2020 16:08:35 +0100
Subject: [PATCH] FIX: Add missing rss routes to parameter api whitelist

---
 lib/auth/default_current_user_provider.rb | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/lib/auth/default_current_user_provider.rb b/lib/auth/default_current_user_provider.rb
index ad94861cf7e..0b0f647ad94 100644
--- a/lib/auth/default_current_user_provider.rb
+++ b/lib/auth/default_current_user_provider.rb
@@ -24,15 +24,18 @@ class Auth::DefaultCurrentUserProvider
       method: :get,
       route: [
         "posts#latest",
-        "posts#user_topics_feed",
         "posts#user_posts_feed",
         "groups#posts_feed",
         "groups#mentions_feed",
+        "list#user_topics_feed",
         "list#category_feed",
-        "list#latest_feed",
-        "list#new_feed",
-        "list#unread_feed",
-        "topics#feed"
+        "topics#feed",
+        "badges#show",
+        "tags#tag_feed",
+        "tags#show",
+        *[:latest, :unread, :new, :read, :posted, :bookmarks].map { |f| "list##{f}_feed" },
+        *[:all, :yearly, :quarterly, :monthly, :weekly, :daily].map { |p| "list#top_#{p}_feed" },
+        *[:latest, :unread, :new, :read, :posted, :bookmarks].map { |f| "tags#show_#{f}" }
       ],
       format: :rss
     },