fix(issue): prevent list of all issues in search engine

btry · btry · commit 55530d976266 · 2024-01-12T09:06:53.000+01:00
dropdown on name of issues give full access because the list is not filtered. Tooltip also gives access to the full content.
This may disclose sensitive data to unauthorized persons
diff --git a/inc/issue.class.php b/inc/issue.class.php
@@ -526,6 +526,10 @@ public function rawSearchOptions() {
          'field'              => 'name',
          'name'               => __('Name'),
          'datatype'           => 'itemlink',
+         'searchtype'         => [
+            '0'                  => 'contains',
+            '1'                  => 'not contains',
+         ],
          'massiveaction'      => false,
          'additionalfields'   => [
             '0'                  => 'display_id'
