Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Search may leak password-protected article content #892

Open
mvz opened this issue Oct 8, 2018 · 1 comment
Open

Search may leak password-protected article content #892

mvz opened this issue Oct 8, 2018 · 1 comment
Assignees
Labels
Milestone

Comments

@mvz
Copy link
Member

mvz commented Oct 8, 2018

Search does not filter out password-protected articles, nor does it check for the presence of a password before rendering.

@mvz mvz added the bug label Oct 8, 2018
@mvz mvz self-assigned this Oct 8, 2018
@mvz mvz added this to the 9.3.0 milestone May 28, 2021
@mvz
Copy link
Member Author

mvz commented Mar 6, 2022

With #1057, content is no longer displayed. However, the articles should probably also be filtered out of the search results completely. To do this, the password storage should be updated so it is no longer a setting but an actual database field.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant