0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 13:08:40 +08:00
discourse/plugins/discourse-ai/app
discoursebot d433b7e1e7
SECURITY: Shared conversations and artifacts remain accessible [backport 2026.1] (#41560)
Backport of #41554 to release/2026.1.

---

## Summary

Prevent unauthorized access to shared AI conversations and artifacts by
verifying the visibility of source topics and posts before rendering.
The patch also ensures that destroying a shared conversation correctly
restores privacy settings for artifacts and uploads even when the source
topic has been trashed.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1398

Co-authored-by: discourse-patch-triage
<272280883+discourse-patch-triage[bot]@users.noreply.github.com>

Co-authored-by: Isaac Janzen <50783505+janzenisaac@users.noreply.github.com>
2026-07-08 15:02:39 -05:00
..
controllers SECURITY: Shared conversations and artifacts remain accessible [backport 2026.1] (#41560) 2026-07-08 15:02:39 -05:00
helpers/discourse_ai/ai_bot
jobs SECURITY: Shared conversations and artifacts remain accessible [backport 2026.1] (#41560) 2026-07-08 15:02:39 -05:00
mailers
models SECURITY: Shared conversations and artifacts remain accessible [backport 2026.1] (#41560) 2026-07-08 15:02:39 -05:00
serializers DEV: migrate enabled_chat_bot column to a setting (#36707) 2025-12-17 09:26:19 -08:00
services SECURITY: Force regeneration for edit-outdated summaries and block stale fallback [backport 2026.1] 2026-03-31 15:12:50 +01:00
views