Via HackerOne. I don't think this has meaningful security impact, but you can add things like wiki pages as Conpherence members. We should probably provide some ConpherenceMessageableInterface and only permit objects which implement it to be added.
Description
Description
Revisions and Commits
Revisions and Commits
Status | Assigned | Task | ||
---|---|---|---|---|
Resolved | None | T5364 Conpherence v2 (Original Discussion) | ||
Resolved | None | T6724 Conduit allows non-users to be added to Conpherences |