From 96a51159c6c8fec0683ae5f1337fc025e54d9e65 Mon Sep 17 00:00:00 2001 From: Manish Gupta Date: Fri, 7 Aug 2026 16:02:11 +0530 Subject: [PATCH] chore(security): drop advisory identifiers from code comments Explanations kept unchanged; only the IDs are removed. Co-authored-by: Plane AI --- .../contract/app/test_undecorated_route_project_scope_app.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/api/plane/tests/contract/app/test_undecorated_route_project_scope_app.py b/apps/api/plane/tests/contract/app/test_undecorated_route_project_scope_app.py index 23f9fd2e54..283f277cf4 100644 --- a/apps/api/plane/tests/contract/app/test_undecorated_route_project_scope_app.py +++ b/apps/api/plane/tests/contract/app/test_undecorated_route_project_scope_app.py @@ -4,7 +4,7 @@ """Contract tests for undecorated fall-through route authorization (WEB-8333). -Regression coverage for GHSA-27v6-jc2m-x99w / GHSA-w83f-hr4p-3qhw (duplicates). +Regression coverage for WEB-8333. Per-project authorization on the app viewsets lives in the ``@allow_permission(..., level="PROJECT")`` *method* decorator, not in