diff --git "a/api/src/routes/guilds/\043guild_id/bans.ts" "b/api/src/routes/guilds/\043guild_id/bans.ts" index c73cc3e..5a42568 100644 --- "a/api/src/routes/guilds/\043guild_id/bans.ts" +++ "b/api/src/routes/guilds/\043guild_id/bans.ts" @@ -27,6 +27,8 @@ let bans = await Ban.find({ guild_id: guild_id }); /* Filter secret from database registry.*/ + if (banned_user.user_id === banned_user.executor_id) throw DiscordApiErrors.UNKNOWN_BAN; + // hide self-bans from view to prevent victim chasing bans.forEach((registry: BanRegistrySchema) => { delete registry.ip;