[buddypress-trac] [BuddyPress Trac] #6504: Messages viewable to any logged out visitor

[buddypress-trac]

#6504: Messages viewable to any logged out visitor
-----------------------------------+------------------------------
 Reporter:  CodeMonkeyBanana       |       Owner:  johnjamesjacoby
     Type:  defect (bug)           |      Status:  closed
 Priority:  normal                 |   Milestone:  2.3.2
Component:  Component - Messaging  |     Version:
 Severity:  blocker                |  Resolution:  fixed
 Keywords:  has-patch 2nd-opinion  |
-----------------------------------+------------------------------

Comment (by johnjamesjacoby):

 In [changeset:"9949"]:
 {{{
 #!CommitTicketReference repository="" revision="9949"
 Messages: Introduce filter to enforce private message thread query
 boundaries.

 This change ensures that all queries for private messages will always
 return anticipated results, even when certain malformed values are passed
 in. It specifically hardens the user ID argument to prevent accidental
 overriding.

 Fixes #6504. Props r-a-y. (2.3 branch, for 2.3.2)
 }}}

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/6504#comment:19>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac