From 4809b8dac6471d2d6d69ffe865446f027f0b2d80 Mon Sep 17 00:00:00 2001 From: thePR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com> Date: Fri, 9 Jan 2026 22:47:06 -0500 Subject: [PATCH] Filter trusted seeds against access control blacklist --- js/services/moderationService.js | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/js/services/moderationService.js b/js/services/moderationService.js index 7bd23de9..7a9750b4 100644 --- a/js/services/moderationService.js +++ b/js/services/moderationService.js @@ -639,19 +639,20 @@ export class ModerationService { this.log("[moderationService] setTrustedSeeds called", { count: seeds?.length || seeds?.size || 0 }); const sanitizedSeeds = new Set(); const adminSnapshot = this.getAdminListSnapshot(); - const blacklistHex = adminSnapshot.blacklistHex; if (seeds instanceof Set || Array.isArray(seeds)) { for (const candidate of seeds) { const normalized = normalizeToHex(candidate); - if (normalized && (!blacklistHex || !blacklistHex.has(normalized))) { + const status = this.getAccessControlStatus(candidate, adminSnapshot); + if (normalized && !status.blacklisted) { sanitizedSeeds.add(normalized); } } } else if (seeds && typeof seeds[Symbol.iterator] === "function") { for (const candidate of seeds) { const normalized = normalizeToHex(candidate); - if (normalized && (!blacklistHex || !blacklistHex.has(normalized))) { + const status = this.getAccessControlStatus(candidate, adminSnapshot); + if (normalized && !status.blacklisted) { sanitizedSeeds.add(normalized); } }