#4324 - Improve on tag (keyword) security

Identifier #4324
Issue type Feature request or suggestion
Title Improve on tag (keyword) security
Status Open
Tags

Type: Security (custom)

Handling member Deleted
Addon search
Description The side_tag_cloud block can now check validation and security permission, behind a block option.
The block option is provided to:
a) Not cause a performance impact, given these checks for each possible keyword instance is going to be very slow
b) Not assume everyone wants such checks

It would be good to put a 'validated' flag into the seo_meta_keywords table itself, so that validation checks could be performed quickly. An index would be put on the (meta_keyword, validated) pair.

Validation checks can then be done as standard, without the block option being needed.

The block option would then be reworded to only be for security checks and likely less desirable for people, as it is unlikely tag leakage is going to be an issue for non-accessible content so long as the content itself is not accessible. Especially because the webmaster may control what content types are used to generate the side_tag_cloud block.
Steps to reproduce

Related to

#4321 - Meta tags being shown for unvalidated entries

Funded? No
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated