Configure as admin:
Exploit as hostile Anonymous:
Fixed by 🐛 Major confusion for subscriptions during user registration Fixed
Fixed
4.0
Code
It makes Drupal less vulnerable to abuse or misuse. Note, this is the preferred tag, though the Security tag has a large body of issues tagged to it. Do NOT publicly disclose security vulnerabilities; contact the security team instead. Anyone (whether security team or not) can apply this tag to security improvements that do not directly present a vulnerability e.g. hardening an API to add filtering to reduce a common mistake in contributed modules.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Most of the work was done in 🐛 Model for confirmations is flawed Fixed . This patch fixes a bug and adds some tests.
Automatically closed - issue fixed for 2 weeks with no activity.