被禁言的用户可以通过匿名模式绕过限制

ted · 2025年四月23日 08:39

你好！

我们刚刚合并了一个修复程序，该程序可以确保在匿名模式下，此处会尊重所有者账户的“静默”状态：

github.com/discourse/discourse

FIX: Delegate silenced_till from anonymous user to main user account

main ← fix/anonymous-silenced-users

opened 06:40AM - 23 Apr 25 UTC

Drenmi

+24 -0

### What is the problem? When a user is silenced they can, given they have th…e permissions, enter anonymous mode and keep posting, essentially bypassing the silence that way. ### How does this fix it? This change delegates the `silenced_till` attribute to the main user record if the user is anonymous. ### Trade-offs and alternative approaches Given anonymous posting is enabled, as of this change, each call to `silenced_till` will produce a minimal query to `anonymous_users` to select one record based on pkey. The alternative to this is to add logic to update the anonymous record's value when it is created and when a user is silenced or unsilenced. Given this choice of a theoretical minimal performance impact on a lukewarm path and a significantly more involved implementation, I chose the former.

話題		回覆	觀看
Anonymous mode not working Bug anonymous-mode	6	827	2020年八月5日
Enable and configure anonymous mode Site Management how-to , anonymous-mode	0	8670	2020年六月23日
Anonymous posting not available even when enabled Support anonymous-mode	7	2921	2020年六月23日
Anonymous posting -- but retaining original user permissions Feature anonymous-mode	11	2099	2021年十二月2日
Anonymous posting for sensitive subjects Feature anonymous-mode	16	2196	2020年六月13日

被禁言的用户可以通过匿名模式绕过限制

相關主題