]> BookStack Code Mirror - bookstack/commit
projects / bookstack / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 32516f7)
Guests: Prevented access to profile routes
authorDan Brown <redacted>
Sat, 26 Aug 2023 13:07:48 +0000 (14:07 +0100)
committerDan Brown <redacted>
Sat, 26 Aug 2023 13:07:48 +0000 (14:07 +0100)
commit9100a82b47b7174d76bb4854716702603403a4e7
tree45066f575b9fed552f0b2fcc2f33327dd46ebfa5tree | snapshot
parent32516f7b6801e9344cdb11578f26f257a854a410commit | diff
Guests: Prevented access to profile routes

Prevention of action on certain routes for guest user when public access
is enabled. Could not see a way this could be a security issue, beyond a
mild nuisance that'd only be visible if public users can edit, which
would present larger potential nuisance anyway.
app/Users/Controllers/UserController.php diff | blob | history
tests/PublicActionTest.php diff | blob | history
The core source code for the BookStack project.
Morty Proxy This is a proxified and sanitized view of the page, visit original site.