[buddypress-trac] [BuddyPress Trac] #6504: Messages viewable to any logged out visitor

buddypress-trac noreply at wordpress.org
Tue Jun 16 22:50:16 UTC 2015


#6504: Messages viewable to any logged out visitor
-----------------------------------+------------------------------
 Reporter:  CodeMonkeyBanana       |       Owner:  johnjamesjacoby
     Type:  defect (bug)           |      Status:  closed
 Priority:  normal                 |   Milestone:  2.3.2
Component:  Component - Messaging  |     Version:
 Severity:  blocker                |  Resolution:  fixed
 Keywords:  has-patch 2nd-opinion  |
-----------------------------------+------------------------------

Comment (by johnjamesjacoby):

 In [changeset:"9949"]:
 {{{
 #!CommitTicketReference repository="" revision="9949"
 Messages: Introduce filter to enforce private message thread query
 boundaries.

 This change ensures that all queries for private messages will always
 return anticipated results, even when certain malformed values are passed
 in. It specifically hardens the user ID argument to prevent accidental
 overriding.

 Fixes #6504. Props r-a-y. (2.3 branch, for 2.3.2)
 }}}

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/6504#comment:19>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list