mealie-recipes / mealie

Mealie is a self hosted recipe manager and meal planner with a RestAPI backend and a reactive frontend application built in Vue for a pleasant user experience for the whole family. Easily add recipes into your database by providing the url and mealie will automatically import the relevant data or add a family recipe with the UI editor
https://docs.mealie.io
GNU Affero General Public License v3.0
5.78k stars 628 forks source link

fix: Security Issues #3530

Closed michael-genson closed 2 months ago

michael-genson commented 2 months ago

What type of PR is this?

(REQUIRED)

What this PR does / why we need it:

(REQUIRED)

Fixes some of the reported security issues from https://github.com/mealie-recipes/mealie/issues/3509

Which issue(s) this PR fixes:

(REQUIRED)

Partial https://github.com/mealie-recipes/mealie/issues/3509

Special notes for your reviewer:

This covers 2 and 3. More info in Discord.

Testing

(fill-in or delete this section)

Manually tested the logout, and manually checked the only frontend endpoint that uses group pagination. I also tested updating the group through the UI to confirm users aren't affected.