Os usuários podem ver conteúdo escondido sinalizado na URL bruta

Moin · 24 Março , 2026 21:49

Acho que isso foi alterado em

github.com/discourse/discourse

FIX: Filter hidden posts from raw topic markdown endpoint (#38237)

main ← loic/fix-topic-raw-export

merged 11:48AM - 04 Mar 26 UTC

Flink

+120 -22

The `/raw/:topic_id` endpoint was exposing hidden posts to users who shouldn't s…ee them, while `/raw/:topic_id/:post_number` correctly filtered them via `guardian.can_see?`. This inconsistency meant anonymous users and regular users could see hidden post content when fetching a whole topic as markdown. Also refactors `markdown_num` into smaller private methods for clarity.

Tópico		Respostas	Vistas
Flagged Contented that is Temporarily Hidden is still visible Feature	18	3887	25 Setembro , 2014
The persistence of posts hidden by flags are a bane to our community UX completed	35	4148	1 Junho , 2023
Flagged post and Discourse Reactions Bug reactions	7	734	13 Maio , 2023
Flagged topics viewable using /raw/ and oneboxing on other websites Bug	0	431	27 Outubro , 2023
Prevent content hidden by flags from being viewed Feature	12	2337	7 Janeiro , 2016

Os usuários podem ver conteúdo escondido sinalizado na URL bruta

Related topics