Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 21:45:25 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-ai/app/controllers/discourse_ai/ai_bot
History
Exact
Isaac Janzen eae3120429
 SECURITY: Shared conversations and artifacts remain accessible (#41554) 
## Summary

Prevent unauthorized access to shared AI conversations and artifacts by
verifying the visibility of source topics and posts before rendering.
The patch also ensures that destroying a shared conversation correctly
restores privacy settings for artifacts and uploads even when the source
topic has been trashed.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1398

Co-authored-by: discourse-patch-triage
<272280883+discourse-patch-triage[bot]@users.noreply.github.com>
2026-07-08 14:41:02 -05:00
..
artifact_key_values_controller.rb
artifacts_controller.rb SECURITY: Shared conversations and artifacts remain accessible (#41554) 2026-07-08 14:41:02 -05:00
bot_controller.rb SECURITY: restrict visibility of ai bot conversations 2026-05-19 00:26:04 +01:00
conversations_controller.rb FIX: Allow AI bot conversations when PM creation is restricted (#41232) 2026-06-29 11:06:39 -05:00
shared_ai_conversations_controller.rb SECURITY: Shared conversations and artifacts remain accessible (#41554) 2026-07-08 14:41:02 -05:00
shared_ai_conversations_controller.rb.lock