yep.

CommentFileSizeAuthor
trivial_patch_month_award.patch438 bytesgreggles

Comments

webchick’s picture

webchick
she/they
Primary language English
Location Vancouver 🇨🇦
commented

Well done! Committed and pushed to 7.x. :)

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented
Title: forum_index not form_index » D8 followup DRUPAL-SA-CORE-2012-002 - Access bypass - forum listing
Version: 7.x-dev » 8.x-dev
Issue tags: +Security improvements

Cool, so that needs to be merged with the code for the node access issue. That's in the private tracker as #61339.

webchick’s picture

webchick
she/they
Primary language English
Location Vancouver 🇨🇦
commented
Status: Active » Closed (duplicate)

Actually, it looks like there's already a public issue for this with some patches at #1302404: D8 followup DRUPAL-SA-CORE-2012-002 - Access bypass - forum listing. Closing this as a duplicate.