Quantcast
Viewing latest article 4
Browse Latest Browse All 21

Leaking Information in Drupal URLs

Update: It turns out the DA was trolling. We all now know that DrupalCon North America 2016 will be in New Orleans. I’ve kept this post up as I believe the information about handling unpublished nodes is relevant. I have also learned that m4032404 is enabled by default in govCMS. When a user doesn’t have access to content in Drupal a 403 forbidden response is returned. This is the case out of the box for unpublished content.

Viewing latest article 4
Browse Latest Browse All 21

Trending Articles