Content selectors (base Content selector, Media selector and Image selector) by default allow content from the root.
Change it only for Content selector (not Media or Image) to by default allow content only inside the current site (what can now be done by setting allowPath="${site}/*"). If needed, user can change it to allow all content by setting "allowPath="*"".
NB! Check that current behaviour remains the same for Media and Image selectors.
@alansemenov commented on Fri Dec 07 2018
Content selectors (base Content selector, Media selector and Image selector) by default allow content from the root. Change it only for Content selector (not Media or Image) to by default allow content only inside the current site (what can now be done by setting
allowPath="${site}/*"). If needed, user can change it to allow all content by setting "allowPath="*"".NB! Check that current behaviour remains the same for Media and Image selectors.