Permissions not or only improperly checked in some contexts #19

创建工单

crtxcr · 2020-09-21T22:08:26+02:00

crtxcr 评论于

2020-09-21 22:08:26 +02:00

管理员

When a user has no permission to see the page history, he still knows about older entries from the global history pages, which can be a metadata leak. They should not be there
Search must also consider permissions such as can_read etc.

1. When a user has no permission to see the page history, he still knows about older entries from the global history pages, which can be a metadata leak. They should not be there 2. Search must also consider permissions such as can_read etc.

crtxcr 于 2020-09-21 22:08:26 +02:00 添加了标签

bug

enhancement

crtxcr 于 2020-09-21 22:08:37 +02:00 修改标题 ~~Permissions not or improperly checked in some contexts~~ 为 Permissions not or only improperly checked in some contexts

crtxcr 于

2021-10-26 23:08:35 +02:00

在代码提交中引用了该工单

sandbox: Disable Landlock due to qssb.h issue #19

登录并参与到对话中。