Contrib.social

Missing explicit access check on entity query

Open on Drupal.org →
Created on 27 April 2023, over 1 year ago
Updated 15 May 2023, over 1 year ago

Problem/Motivation

After scan code on 'Drupal 10 upgrade status' see in the issues possible problem with query.

Steps to reproduce

Core 9.4.14 .
Install 'Upgrade status', run checking. See IMCE section.

Proposed resolution

See added patch.
In short, needs add 'accessCheck' into entityQuery query.

Remaining tasks

No changes.

User interface changes

No changes.

API changes

No changes.

Data model changes

No changes.

📌 Task
Status

Fixed

Version

3.0

Component

Code

Created by

🇺🇦Ukraine t1mm1 Kiev

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024