Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 13:08:40 +08:00
Code Packages Activity Actions
discourse/plugins/poll/app
History
Exact
OsamaSayegh 31df60656d SECURITY: Add post visibility check to poll voters endpoint 
The `/polls/voters.json` endpoint was missing authorization checks to
verify if users could access the post containing the poll. This allowed
unauthorized users (including anonymous users) to retrieve voter data
from polls in posts they don't have access to.
2026-02-26 12:24:37 +00:00
..
controllers/discourse_poll SECURITY: Add post visibility check to poll voters endpoint 2026-02-26 12:24:37 +00:00
models FEATURE: dynamic poll support (#34368) 2025-08-19 16:43:36 +10:00
serializers FEATURE: dynamic poll support (#34368) 2025-08-19 16:43:36 +10:00