View Issue Details

IDProjectCategoryView StatusLast Update
4324Composrsearchpublic2021-03-15 03:43
ReporterChris Graham Assigned To 
PrioritynormalSeverityfeature 
Status newResolutionopen 
Summary4324: Improve on tag (keyword) security
DescriptionThe side_tag_cloud block can now check validation and security permission, behind a block option.
The block option is provided to:
a) Not cause a performance impact, given these checks for each possible keyword instance is going to be very slow
b) Not assume everyone wants such checks

It would be good to put a 'validated' flag into the seo_meta_keywords table itself, so that validation checks could be performed quickly. An index would be put on the (meta_keyword, validated) pair.

Validation checks can then be done as standard, without the block option being needed.

The block option would then be reworded to only be for security checks and likely less desirable for people, as it is unlikely tag leakage is going to be an issue for non-accessible content so long as the content itself is not accessible. Especially because the webmaster may control what content types are used to generate the side_tag_cloud block.
TagsType: Security
Attach Tags
Time estimation (hours)3
Sponsorship open

Sponsor

Date Added Member Amount Sponsored

Relationships

related to 4321 ResolvedChris Graham Meta tags being shown for unvalidated entries 

Activities

There are no notes attached to this issue.

Add Note

View Status
Note
Upload Files
Maximum size: 32,768 KiB

Attach files by dragging & dropping, selecting or pasting them.
You are not logged in You are not logged in. This means you will not get any e-mail notifications. And if you reply, we will not know for sure you are the original poster of the issue.

Issue History

Date Modified Username Field Change
2020-07-16 04:00 Chris Graham New Issue
2020-07-16 04:00 Chris Graham Relationship added related to 4321
2021-03-15 03:43 Chris Graham Tag Attached: Type: Security