[openstreetmap/openstreetmap-website] Create & comment notes possible with access token without `write_notes` permission (Issue #4362)

[Tobias Zwick]

> It this thing visible to anyone?
> https://github.com/openstreetmap/openstreetmap-website/security/advisories/GHSA-cp68-6cpj-gg2j

Not to me.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/4362#issuecomment-1822683562
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/issues/4362/1822683562 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20231122/ca73c2a2/attachment-0001.htm>