HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

Search allows guest to peek at member's only catogory posts

x00x00 MVP
edited September 2011 in Feedback
#1091

There was a previous issue #91 that is now closed that may have been related.

If /search is available to all, then members only post should not be searchable. Even though you can't access the posts, they should not be glimpse-able.

grep is your friend.

Comments

Sign In or Register to comment.