Permissions not or only improperly checked in some contexts #19
Notiek ielāde…
x
Atsaukties uz šo jaunā problēmā
Block a user
Nav sniegts apraksts.
Dzēst atzaru "%!s()"
Atzara dzēšana ir neatgriezeniska. Kaut arī izdzēstais zars neilgu laiku var turpināt pastāvēt, pirms tas tiešām tiek noņemts, to vairumā gadījumu NEVAR atsaukt. Vai turpināt?
When a user has no permission to see the page history, he still knows about older entries from the global history pages, which can be a metadata leak. They should not be there
Search must also consider permissions such as can_read etc.
Permissions not or improperly checked in some contextsuz Permissions not or only improperly checked in some contexts