RSS Feed/News Crafted post search query can skip Post::getTypePermissionConstraints

Status
Not open for further replies.

ENXF NET

Administrator
Staff member
Administrator
Moderator
+Lifetime VIP+
S.V.I.P.S Member
S.V.I.P Member
V.I.P Member
Collaborate
Registered
Joined
Nov 13, 2018
Messages
28,878
Points
823

Reputation:

This is related to this bug, but is a deeper design issue.

Both actionSearch/actionMembers allow a search query to target the thread search handler without loading the post search handler's getTypePermissionConstraints values. These search constraints would normally be loaded if a "thread" search was done via the advanced search form.

Thread::getTypePermissionConstraints returns an empty array, unlike...

Read more

Continue reading...
 
Status
Not open for further replies.
Top