Os usuários podem ver conteúdo escondido sinalizado na URL bruta

Moin · Março 24, 2026, 9:49pm

Acho que isso foi alterado em

github.com/discourse/discourse

FIX: Filter hidden posts from raw topic markdown endpoint (#38237)

main ← loic/fix-topic-raw-export

merged 11:48AM - 04 Mar 26 UTC

Flink

+120 -22

The `/raw/:topic_id` endpoint was exposing hidden posts to users who shouldn't s…ee them, while `/raw/:topic_id/:post_number` correctly filtered them via `guardian.can_see?`. This inconsistency meant anonymous users and regular users could see hidden post content when fetching a whole topic as markdown. Also refactors `markdown_num` into smaller private methods for clarity.

Tópico		Respostas	Visualizações
Flagged Contented that is Temporarily Hidden is still visible Feature	18	3858	25 de Setembro de 2014
The persistence of posts hidden by flags are a bane to our community UX completed	35	4043	1 de Junho de 2023
Flagged post and Discourse Reactions Bug reactions	7	726	13 de Maio de 2023
Flagged topics viewable using /raw/ and oneboxing on other websites Bug	0	431	27 de Outubro de 2023
Prevent content hidden by flags from being viewed Feature	12	2333	7 de Janeiro de 2016

Os usuários podem ver conteúdo escondido sinalizado na URL bruta

Tópicos relacionados