mirror of
https://github.com/discourse/discourse.git
synced 2026-08-04 10:39:43 +08:00
1599c4512b## Summary The admin upcoming-changes toggle endpoint accepted any public zero-argument SiteSetting method as a valid setting name. The fix restricts eligibility to registered upcoming-change metadata by checking UpcomingChanges.exists? instead of SiteSetting.respond_to?, preventing invocation of non-setting methods like notify_changed!. ## Source - Patch Triage: https://patch.discourse.org/patch-triage/1508 Co-authored-by: discourse-patch-triage <272280883+discourse-patch-triage[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| action | ||
| list_spec.rb | ||
| notify_promotion_spec.rb | ||
| notify_promotions_spec.rb | ||
| toggle_spec.rb | ||
| track_spec.rb | ||
