Skip to content

Conversation

@sig-steve
Copy link

It appears that in SilverStripe 3.6.1 (if not others) that single-valued field values can be passed in from the client. These values do not get checked to see whether they refer to validFileIDs from the session.

The change here is to ensure that single values (that are not in an array) are also checked against the valid file ids.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant