Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-08 16:57:36 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-rewind/spec/actions
History
Exact
Penar Musaraj c3177d729e
 SECURITY: BestTopics report includes unlisted topics (#41000) 
## Summary

This is a minor security issue, DiscourseRewind::Action::BestTopics
filters deleted/private/read-restricted topics, but doesn't filter by
`visible=true`.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1174
- HackerOne report: https://hackerone.com/reports/3748532

---

🤖 Auto-generated from the patch diff via Patch Triage. Review carefully
before merging.

Co-authored-by: discourse-patch-triage
<272280883+discourse-patch-triage[bot]@users.noreply.github.com>
2026-06-17 17:27:13 -04:00
..
activity_calendar_spec.rb
best_posts_spec.rb FIX: Hidden post excerpts can appear in public BestPosts rewinds (#40146) 2026-05-19 11:06:19 +10:00
best_topics_spec.rb SECURITY: BestTopics report includes unlisted topics (#41000) 2026-06-17 17:27:13 -04:00
chat_usage_spec.rb SECURITY: private category channels are not included (#36716) 2025-12-16 11:07:40 +01:00
fbff_spec.rb FIX: Exclude muted and ignored users from FBFF calculation (#36610) 2025-12-11 11:11:16 +10:00
most_viewed_categories_spec.rb FIX: More Rewind visibility fixes (#36713) 2025-12-16 18:16:29 +10:00
most_viewed_tags_spec.rb DEV: Follow up spec fix (#37698) 2026-02-11 11:51:51 +08:00
reading_time_spec.rb
top_words_spec.rb
writing_analysis_spec.rb FIX: Do not count deleted posts or topics in Rewind score calculation (#37434) 2026-02-02 17:00:49 +10:00