Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://gh.wpcy.net/https://github.com/discourse/discourse.git synced 2026-05-26 21:18:34 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-data-explorer/spec/requests
History
Exact
Sam e3f711855c
FIX: Data Explorer post relations expose private post excerpts to group report users (#39819) 
A non obvious issue in data explorer is that it can return sideloaded
data (topic/user/post)
ensure side loaded data runs through security rules for account viewing
it.

Can easily be bypassed by amending the query so it will have minimal
impact.
2026-05-07 14:41:16 +10:00
..
group_spec.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
query_controller_spec.rb FIX: Data Explorer post relations expose private post excerpts to group report users (#39819) 2026-05-07 14:41:16 +10:00