Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://gh.wpcy.net/https://github.com/discourse/discourse.git synced 2026-05-07 17:25:47 +08:00
Code Packages Activity Actions
discourse/plugins/poll/app/controllers
History
Exact
OsamaSayegh bc19934384 SECURITY: Add post visibility check to poll voters endpoint 
The `/polls/voters.json` endpoint was missing authorization checks to
verify if users could access the post containing the poll. This allowed
unauthorized users (including anonymous users) to retrieve voter data
from polls in posts they don't have access to.
2026-02-26 12:22:54 +00:00
..
discourse_poll SECURITY: Add post visibility check to poll voters endpoint 2026-02-26 12:22:54 +00:00