PHPBB3-17137: No response yet

Discuss requests for comments/changes posted in the Issue Tracker for the development of phpBB. Current releases are 3.2/Rhea and 3.3/Proteus.
Post Reply
ElooKoN
Registered User
Posts: 2
Joined: Tue Jul 25, 2023 12:36 am

PHPBB3-17137: No response yet

Post by ElooKoN »

I opened PHPBB3-17137 more than two months ago, but there is no response yet. Has it been missed?

User avatar
Marc
Development Team Leader
Development Team Leader
Posts: 195
Joined: Thu Sep 09, 2010 11:36 am
Location: Munich, Germany

Re: PHPBB3-17137 (Vulnerability): No response yet

Post by Marc »

I have created a PR to address the issue described in that ticket. While the current behavior is undesirable, it is not any bypass of authentication since attachments in posts/pms where handled differently compared to the content. This is unfortunate and I understand the frustration. Therefore I agree with adjusting this and have created a PR.
Would be great if you could give feedback if the changes work for you.

ElooKoN
Registered User
Posts: 2
Joined: Tue Jul 25, 2023 12:36 am

Re: PHPBB3-17137: No response yet

Post by ElooKoN »

Pull-request checked and confirmed working as intended.

Post Reply