Page MenuHomePhabricator

Conduit allows non-users to be added to Conpherences
Closed, ResolvedPublic

Description

Via HackerOne. I don't think this has meaningful security impact, but you can add things like wiki pages as Conpherence members. We should probably provide some ConpherenceMessageableInterface and only permit objects which implement it to be added.