Skip to content

Commit

Permalink
fix(issue): prevent list of all issues in search engine
Browse files Browse the repository at this point in the history
dropdown on name of issues give full access because the list is not filtered. Tooltip also gives access to the full content.
This may disclose sensitive data to unauthorized persons
  • Loading branch information
btry committed Jan 12, 2024
1 parent 09682e9 commit 55530d9
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions inc/issue.class.php
Original file line number Diff line number Diff line change
Expand Up @@ -526,6 +526,10 @@ public function rawSearchOptions() {
'field' => 'name',
'name' => __('Name'),
'datatype' => 'itemlink',
'searchtype' => [
'0' => 'contains',
'1' => 'not contains',
],
'massiveaction' => false,
'additionalfields' => [
'0' => 'display_id'
Expand Down

0 comments on commit 55530d9

Please sign in to comment.