The T&C page's URL can be used by anonymous users so the page should expire after some time.

However the link can be used only once, it cannot be exploited by multiple anonymous users. The security team considered this a non-security issue and therefore the issue has been moved to the public issue queue.

Comments

aidanlis’s picture

Your request makes no sense ... An anonymous user wishes to register at your site, to register they must view the terms and conditions, yet you want to hide the terms and conditions from anonymous users?

robert castelo’s picture

Version: master » 6.x-8.x-dev
Issue summary: View changes
Status: Active » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.