Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-11 02:59:07 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-ai/spec/requests/ai_bot
History
Exact
Isaac Janzen eae3120429
 SECURITY: Shared conversations and artifacts remain accessible (#41554) 
## Summary

Prevent unauthorized access to shared AI conversations and artifacts by
verifying the visibility of source topics and posts before rendering.
The patch also ensures that destroying a shared conversation correctly
restores privacy settings for artifacts and uploads even when the source
topic has been trashed.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1398

Co-authored-by: discourse-patch-triage
<272280883+discourse-patch-triage[bot]@users.noreply.github.com>
2026-07-08 14:41:02 -05:00
..
artifact_key_values_controller_spec.rb
artifacts_controller_spec.rb SECURITY: Shared conversations and artifacts remain accessible (#41554) 2026-07-08 14:41:02 -05:00
bot_controller_spec.rb SECURITY: restrict visibility of ai bot conversations 2026-05-19 00:26:04 +01:00
conversation_creation_spec.rb FIX: Allow AI bot conversations when PM creation is restricted (#41232) 2026-06-29 11:06:39 -05:00
conversations_controller_spec.rb FEATURE: Star AI bot conversations in sidebar (#39869) 2026-05-14 15:04:31 +10:00
shared_ai_conversations_controller_spec.rb SECURITY: Shared conversations and artifacts remain accessible (#41554) 2026-07-08 14:41:02 -05:00
shared_ai_conversations_controller_spec.rb.lock FIX: GET preview performs state changes and can publish artifacts even when sharing is denied (#38224) 2026-04-21 15:01:07 +10:00
topic_serialization_spec.rb