mirror of
https://github.com/AmruthPillai/Reactive-Resume.git
synced 2026-10-03 18:23:47 +10:00
Amruth Pillai
23ea18241b
Moving a resume to Trash is meant to stop its public link, but the public PDF, the download counter and the social card still looked resumes up by username and slug alone, so a trashed public resume kept serving its PDF, counting downloads and rendering a card. They now skip trashed resumes, like getBySlug and verifyPassword already did. The public getBySlug response also carried everything the author had hidden (sections, entries, the summary and the picture URL), although the builder says hidden sections aren't printed or shared. redactResumeForViewer now strips them for anyone but the owner; the rendered resume is unchanged. The server-rendered social card read the raw row, so it could show the hidden summary and the owner's private dashboard title; it now builds from the same redacted data an anonymous visitor gets.