HandlerPageView: Add misisng check whether passed revision is most recent

handlers/handlerpageview.cpp

@@ -91,9 +91,13 @@ Response HandlerPageView::handleRequest(PageDao &pageDao, std::string pagename,
 		if(revisionid > 0)
 		{
 			if(!effectivePermissions(pagename).canSeePageHistory())
+			{
+				auto current = this->database->createRevisionDao()->getCurrentForPage(pagename);
+				if(current && current->revision > revisionid)
 				{
 					return errorResponse("Error", "You are not allowed to view older revisions of this page");
 				}
+			}
 			revision = this->database->createRevisionDao()->getRevisionForPage(pagename, revisionid);
 			if(!revision)
 			{