There are several places in VBO/actions that allow php execution. We should prevent those.

Comments

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented
Issue summary: View changes
Status: Active » Closed (duplicate)

#2596129: Implement hook_action_info_alter() to more-fully disable views_bulk_operations_script_action.