Filter Tips page is viewable by anonymous users

CuBoulder / express_mono

Monolithic Express Profile - contains all bundles

GNU General Public License v2.0

1 stars 2 forks source link

Closed ekellagher closed 3 years ago

ekellagher commented 3 years ago

A compose tips page is public when you are logged out of a site just type /filter/tips at the end of a URL such as https://www.colorado.edu/webcentral/filter/tips

I discovered this when working with a client on their site map filter tip

AlanBCole commented 3 years ago

I do not believe that this is in our codebase. Is this something that we should fix?

jwfuller commented 3 years ago

@AlanBCole The page comes from a contrib module or core, we want to suppress it via our codebase