Page MenuHomePhabricator
Create Task
Maniphest T13350

Ancient "slowvote.info" API method bypasses policy checks
Closed, ResolvedPublic
Actions

Description

See https://hackerone.com/reports/661978. The ancient slowvote.info API endpoint predates policies and was never updated to use a proper Query; instead, it uses a raw load() call which ignores policy checks.

This call should also be deprecated in favor of a modern slowvote.search call.

Revisions and Commits

Restricted Differential RevisionRestricted Diffusion Commit
Restricted Differential RevisionRestricted Diffusion Commit
Restricted Differential RevisionRestricted Diffusion Commit
Restricted Differential RevisionRestricted Diffusion Commit

Event Timeline

epriestley triaged this task as Low priority.Jul 30 2019, 6:46 PM
epriestley created this task.
Herald added subscribers: amckinley, cburroughs, andypuettmann, revi. · View Herald TranscriptJul 30 2019, 6:46 PM
epriestley added a revision: Restricted Differential Revision.Jul 30 2019, 6:53 PM
epriestley added a commit: Restricted Diffusion Commit.Jul 30 2019, 6:56 PM
epriestley added a revision: Restricted Differential Revision.Jul 31 2019, 6:17 PM
epriestley added a revision: Restricted Differential Revision.Jul 31 2019, 6:22 PM
epriestley added a revision: Restricted Differential Revision.Jul 31 2019, 6:25 PM
epriestley closed this task as Resolved by committing Restricted Diffusion Commit.Jul 31 2019, 6:26 PM
epriestley added a commit: Restricted Diffusion Commit.
epriestley added a commit: Restricted Diffusion Commit.
epriestley added a commit: Restricted Diffusion Commit.
Phabricator · Built by Phacility