RSS Feed/News internalDataAdapter visibility is set to public

Status
Not open for further replies.

ENXF NET

Administrator
Staff member
Administrator
Moderator
+Lifetime VIP+
S.V.I.P.S Member
S.V.I.P Member
V.I.P Member
Collaborate
Registered
Joined
Nov 13, 2018
Messages
33,628
Points
823

Reputation:

We've created an addon to serve attachments directly from S3 using S3 presigned URLs instead of routing through xenforo attachment controller .. we noticed that signed URLs keep working after expiry and after removing the signing secret .. checking the bucket, I found that attachments visibility is set to public ( bucket setting is set to private ) .. tracking the code I found the issue here
PHP:

Code:
$internalData = new EventableFilesystem($internalDataAdapter, [
            'visibility' =>...

Read more

Continue reading...
 
Status
Not open for further replies.
Top