Gli utenti possono vedere contenuti nascosti segnalati nel URL grezzo

Moin · 24 Marzo 2026, 9:49pm

Penso che questo sia stato modificato in

github.com/discourse/discourse

FIX: Filter hidden posts from raw topic markdown endpoint (#38237)

main ← loic/fix-topic-raw-export

merged 11:48AM - 04 Mar 26 UTC

Flink

+120 -22

The `/raw/:topic_id` endpoint was exposing hidden posts to users who shouldn't s…ee them, while `/raw/:topic_id/:post_number` correctly filtered them via `guardian.can_see?`. This inconsistency meant anonymous users and regular users could see hidden post content when fetching a whole topic as markdown. Also refactors `markdown_num` into smaller private methods for clarity.

Argomento		Risposte	Visualizzazioni
Flagged Contented that is Temporarily Hidden is still visible Feature	19	3760	Ottobre 12, 2014
The persistence of posts hidden by flags are a bane to our community UX completed	36	3743	Giugno 8, 2023
Flagged post and Discourse Reactions Bug reactions	8	662	Maggio 13, 2023
Flagged topics viewable using /raw/ and oneboxing on other websites Bug	0	421	Ottobre 27, 2023
Prevent content hidden by flags from being viewed Feature	13	2285	Dicembre 4, 2025

Gli utenti possono vedere contenuti nascosti segnalati nel URL grezzo

Argomenti correlati