fix(RSS): use temporary site_url

Closes #74
schn4ck · Jun 7, 2018 · 453d33d · 453d33d
1 parent 76fd6c0
commit 453d33d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/server.js b/src/server.js
@@ -125,9 +125,11 @@ function run(db) {
 
     // rss feed of comments in need of moderation
     app.get('/feed', (request, reply) => {
+        const user = getUser(request);
+        if (!isAdmin(user)) return reply.status(403).send({error: 'Forbidden'});
         var feed = new RSS({
             title: 'Awaiting moderation',
-            site_url: config.allow_origin[0] // @FIXME
+            site_url: config.get('schnack_host')
         });
         db.each(queries.awaiting_moderation, (err, row) => {
             if (err) console.error(err.message);