[RSS Feed/News] User receives a notification about his post being moved to/within an inaccessible forum that leaks the thread title

Status
Not open for further replies.

XenForo

Administrative
  • Thread starter
  • Admin
  • #1
How to reproduce:
  1. Move a thread that Alice participated in to a forum that Alice has no access to. (Or revoke Alice's access to a forum she previously posted in.)
  2. In this thread, move one of the posts by Alice to a new thread (within the same forum that Alice has no access to). Don't manually uncheck "Notify author of this action".
This results in a notification for Alice with a broken link to the inaccessible thread. But more importantly the notification leaks the title of...

Read more

ادامه مطلب...
 
Status
Not open for further replies.
Back
Top Bottom