Non-admins able to Change content model of a page on Lifewiki

Has something gone haywire? Let us know about it!
Post Reply
atavoidirc
Posts: 50
Joined: April 14th, 2022, 3:09 pm

Non-admins able to Change content model of a page on Lifewiki

Post by atavoidirc » June 22nd, 2023, 7:24 pm

I'm pretty certain this can be used to execute arbitrary javascript code so it should probably be restricted.
Top
User avatar
Ian07
Moderator
Posts: 896
Joined: September 22nd, 2018, 8:48 am
Location: New Jersey, US

Re: Non-admins able to Change content model of a page on Lifewiki

Post by Ian07 » June 22nd, 2023, 8:02 pm

Nathaniel has confirmed on Discord that he's looking into this.

EDIT: Modifying content models is now an admin-only action.
Top
Post Reply

Return to “Bugs & Errors”