Security issue about oc-wysiwyg-editors HOT 3 CLOSED

yeh you are right alxy , i will try to add some security, i though i just use Ocotber CMS authentication to check for a valid user, like laravel protected routes using filter

Route::group(array('before' => 'auth'), function(){

// file browser`s Route 

});

do you have any idea how October CMS`s Authentication working?

for next 4-5 days i am very busy i have no time to check for this, will do it after 4-5 days.

from oc-wysiwyg-editors.

fixed it please check

now only logged in user can access that file browser`s URL.

from oc-wysiwyg-editors.

Hi,

you should return a Response with the correct HTTP code. Currently, it will be 200 OK, which is not ok :P It should be:

return Response::make('You are not allowed....', 403);

from oc-wysiwyg-editors.