Under some circumstances, the Blog Navigation Block displays a link labeled "Post new blog entry" to anonymous users.

While connected as an anonymous user, I was able to see this link on these pages:

http://domain.tld/blog
http://domain.tld/comment/reply/12 [the comment preview screen]
404 pages

Naturally the new blog entry page returns "access denied", so this isn't a security issue per se.

Comments

svendecabooter’s picture

svendecabooter
he/him
Primary language Dutch
Location Gent
commented
Status: Active » Fixed

Nice catch
Fixed this in HEAD. A new release will come out later this week which should fix this problem.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.