Pentest follow-up (low finding): the reserved-slug list was missing route names mine, unlock, guess and the attachment-route prefix f. No route shadowing occurs today (those routes register before /{id}) but the names were claimable as custom slugs. One-line fix + tests pass.
Ref #160
Pentest follow-up (low finding): the reserved-slug list was missing route names mine, unlock, guess and the attachment-route prefix f. No route shadowing occurs today (those routes register before /{id}) but the names were claimable as custom slugs. One-line fix + tests pass.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Ref #160
Pentest follow-up (low finding): the reserved-slug list was missing route names mine, unlock, guess and the attachment-route prefix f. No route shadowing occurs today (those routes register before /{id}) but the names were claimable as custom slugs. One-line fix + tests pass.