yep.

Files: 
CommentFileSizeAuthor
trivial_patch_month_award.patch438 bytesgreggles

Comments

webchick’s picture

Well done! Committed and pushed to 7.x. :)

greggles’s picture

Title: forum_index not form_index » D8 followup DRUPAL-SA-CORE-2012-002 - Access bypass - forum listing
Version: 7.x-dev » 8.x-dev
Issue tags: +Security improvements

Cool, so that needs to be merged with the code for the node access issue. That's in the private tracker as #61339.

webchick’s picture

Status: Active » Closed (duplicate)

Actually, it looks like there's already a public issue for this with some patches at #1302404: D8 followup DRUPAL-SA-CORE-2012-002 - Access bypass - forum listing. Closing this as a duplicate.