Skip to content

security hole in find_record method #102

Closed

Description

@catmando

The find_record method does not use the secured method calls for relations, scopes, and finders.

Activity

  1. added this to the alpha1.3 milestone on Jan 10, 2019
  2. added
    ready-to-releaseInternal Use Only: Has been fixed, specs passing and pushed to edge branch
    on Jan 16, 2019
  3. added a commit that references this issue on Jul 10, 2023
    64117de
  4. added 4 commits that reference this issue on Sep 2, 2026
    425c635
    ae51301
    cd128f9
    2051080
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingready-to-releaseInternal Use Only: Has been fixed, specs passing and pushed to edge branch

    Type

    No type

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions