diff --git a/app/controllers/posts_controller.rb b/app/controllers/posts_controller.rb
index b7c321ed9..4088e7ff0 100644
--- a/app/controllers/posts_controller.rb
+++ b/app/controllers/posts_controller.rb
@@ -42,7 +42,7 @@ class PostsController < ApplicationController
.limit(50)
# Remove posts the user doesn't have permission to see
# This isn't leaking any information we weren't already through the post ID numbers
- posts = posts.reject { |post| !guardian.can_see?(post) }
+ posts = posts.reject { |post| !guardian.can_see?(post) || post.topic.blank? }
counts = PostAction.counts_for(posts, current_user)
respond_to do |format|
diff --git a/app/views/posts/latest.rss.erb b/app/views/posts/latest.rss.erb
index f0f452a90..7cfb0a8e1 100644
--- a/app/views/posts/latest.rss.erb
+++ b/app/views/posts/latest.rss.erb
@@ -7,7 +7,7 @@
<%= @link %>
<%= @description %>
<% @posts.each do |post| %>
- <% next unless post.user && post.topic %>
+ <% next unless post.user %>
<%= post.topic.title %>]]>
diff --git a/spec/controllers/posts_controller_spec.rb b/spec/controllers/posts_controller_spec.rb
index 76e76f6f3..7cc71f84c 100644
--- a/spec/controllers/posts_controller_spec.rb
+++ b/spec/controllers/posts_controller_spec.rb
@@ -53,6 +53,32 @@ end
describe PostsController do
+ describe 'latest' do
+ let(:user) { log_in }
+ let!(:post) { Fabricate(:post, user: user) }
+ let!(:topicless_post) { Fabricate(:post, user: user, raw: '
Car 54, where are you?
') }
+
+ before do
+ topicless_post.update topic_id: -100
+ end
+
+ it 'does not return posts without a topic for json' do
+ xhr :get, :latest, format: :json
+ expect(response).to be_success
+ json = ::JSON.parse(response.body)
+ post_ids = json['latest_posts'].map { |p| p['id'] }
+ expect(post_ids).to include post.id
+ expect(post_ids).to_not include topicless_post.id
+ end
+
+ it 'does not return posts without a topic for rss' do
+ xhr :get, :latest, format: :rss
+ expect(response).to be_success
+ expect(assigns(:posts)).to include post
+ expect(assigns(:posts)).to_not include topicless_post
+ end
+ end
+
describe 'cooked' do
before do
post = Post.new(cooked: 'wat')