- π¦πΊAustralia acbramley
Triaged as part of BSI
Does this issue still apply? Is it only a bug when #2599958: Possible access bypass for rendered links β is applied? If so perhaps it should be moved there?
If not, please supply steps to reproduce from a fresh Drupal install.
Thanks!
- πΊπΈUnited States mlncn Minneapolis, MN, USA
Could it be related to [ π Url access / PathValidator not language/options aware Active ] where the Url object not being a "full" Url object when created with
<current>
leads to access checks falsely returning false?