Contrib.social

Missing Access Control Check Prior to Rendering Link

Open on Drupal.org →
Created on 24 August 2023, about 1 year ago
Updated 19 October 2024, about 1 month ago

Problem/Motivation

It appears that there is a missing access control check before rendering a link within the module. In situations where the flag object is absent within a template, this issue becomes prominent. I'm currently unaware of the intended approach on how access control was designed within this module. Adding a check to verify access before rendering the link could potentially address multiple issues that others are reporting.

I've attached a related issue, which is similar to what I've outlined above, but believe the code change should happen closer to the render method and shouldn't be the responsibility of the build method.

🐛 Bug report
Status

Active

Version

4.0

Component

Flag core

Created by

🇺🇸United States droath

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024