Feeling Lucky
?
[#29809] - [4.0] Ability to make faked admin dashboards
- Closed
- 2 Jan 2021
- Medium
- Build: master
- # 29809
Steps to reproduce the issue
Install Joomla 4
Go to admin and login as super admin
Fake a url
https://example.com/administrator/index.php?option=com_cpanel&view=cpanel&dashboard=SOMETHINGELSE
Expected result
404
The value of dashboard should be validated
Actual result
You can now see Add module to the dashboard link
You can use that link to actually add modules to this made up dashboard and save the module.
You can see the modules on your fake url
https://example.com/administrator/index.php?option=com_cpanel&view=cpanel&dashboard=SOMETHINGELSE
joomla-cms-bot
- | Labels |
Added:
?
|
||
| Title |
|
||||||
PhilETaylor
- comment
- 1 Jul 2020
No idea - but it should not be able to be created on the fly ;-)
| Status | New | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2021-01-02 03:08:55 |
| Closed_By | ⇒ | bembelimen |
bembelimen
- comment
- 2 Jan 2021
Why? that's exactly an expected behaviour, creating dashboards on the fly, as many as you want (e.g. for creation in a custom menu)
Validated against what?