mirror of
https://github.com/discourse/discourse.git
synced 2026-08-11 02:59:07 +08:00
0337d7ddd8## Summary Prevent the unauthorized disclosure of hidden or whisper posts through the `/solution/by_user` endpoint. The patch ensures that only posts visible to the current visitor are returned by applying post-level visibility filters and guardian authorization checks during serialization. ## Source - Patch Triage: https://patch.discourse.org/patch-triage/1400 Co-authored-by: discourse-patch-triage <272280883+discourse-patch-triage[bot]@users.noreply.github.com> --------- Co-authored-by: discourse-patch-triage[bot] <272280883+discourse-patch-triage[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| admin_dashboard_support_controller.rb | ||
| answer_controller.rb | ||
| shared_issue_controller.rb | ||
| solved_topics_controller.rb | ||
