User can bypass category minimum required tags validation

here’s how to go around it:

conditions: A category allows only tag from a specific tag group and requires applying at least 1 tag.

steps:

  • create a new topic
  • instead of selecting a tag from available options, type a new name and create a tag
  • save the topic

result: the new topic has no tags

5 Likes

Fixed via:

https://github.com/discourse/discourse/commit/0183656631e86ecb8eb6b443a15ea52a9d1acbd9

Thanks for reporting this issue @BlackKnob. :+1:

7 Likes

This topic was automatically closed after 18 hours. New replies are no longer allowed.