被禁言的用户可以通过匿名模式绕过限制

ted · 2025 年4 月 23 日 08:39

你好！

我们刚刚合并了一个修复程序，该程序可以确保在匿名模式下，此处会尊重所有者账户的“静默”状态：

github.com/discourse/discourse

FIX: Delegate silenced_till from anonymous user to main user account

main ← fix/anonymous-silenced-users

opened 06:40AM - 23 Apr 25 UTC

Drenmi

+24 -0

### What is the problem? When a user is silenced they can, given they have th…e permissions, enter anonymous mode and keep posting, essentially bypassing the silence that way. ### How does this fix it? This change delegates the `silenced_till` attribute to the main user record if the user is anonymous. ### Trade-offs and alternative approaches Given anonymous posting is enabled, as of this change, each call to `silenced_till` will produce a minimal query to `anonymous_users` to select one record based on pkey. The alternative to this is to add logic to update the anonymous record's value when it is created and when a user is silenced or unsilenced. Given this choice of a theoretical minimal performance impact on a lukewarm path and a significantly more involved implementation, I chose the former.

话题		回复	浏览量
Anonymous mode not working Bug anonymous-mode	7	728	2020 年8 月 9 日
Enable and configure anonymous mode Site Management how-to , anonymous-mode	0	7941	2020 年6 月 23 日
Anonymous posting not available even when enabled Support anonymous-mode	7	2751	2020 年6 月 23 日
Anonymous posting -- but retaining original user permissions Feature anonymous-mode	11	1821	2021 年12 月 2 日
Anonymous posting for sensitive subjects Feature anonymous-mode	16	1975	2020 年6 月 13 日

被禁言的用户可以通过匿名模式绕过限制

相关话题