[openstreetmap/openstreetmap-website] Create & comment notes possible with access token without `write_notes` permission (Issue #4362)

[Anton Khorev]

It this thing visible to anyone?
https://github.com/openstreetmap/openstreetmap-website/security/advisories/GHSA-cp68-6cpj-gg2j

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/4362#issuecomment-1822679318
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/issues/4362/1822679318 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20231122/df5864ba/attachment.htm>