mirror of
https://github.com/discourse/discourse.git
synced 2026-08-10 23:00:09 +08:00
4459742becModal nodes publish an approve/reject modal to a single resolved target user over a per-user MessageBus channel. Each button carried an HMAC-signed action token, but the token only proved it was issued by the server, not who it was for: any logged-in user who obtained a valid token could POST it and resume the execution under their own account. In practice this was hard to pull off as only the valid user would get the message bus event (and the modal to show), but this is an important defense in depth fix to apply. |
||
|---|---|---|
| .. | ||
| fabricators | ||
| integration | ||
| jobs/regular/discourse_workflows | ||
| lib/discourse_workflows | ||
| models/discourse_workflows | ||
| requests/discourse_workflows | ||
| serializers | ||
| services/discourse_workflows | ||
| support | ||
| system | ||
| plugin_helper.rb | ||
