mirror of
https://github.com/makeplane/plane.git
synced 2026-09-02 03:59:00 +02:00
The test module's docstring embedded the internal advisory ticket reference directly in source. This repo is public, and an ID tying a docstring straight to the exact authorization gap it covers hands anyone on an unpatched fork a precise map from advisory to vulnerable code path. Reworded the docstring to describe the invariant under test (PUT must enforce the same authorization as PATCH) instead. Co-authored-by: Plane AI <noreply@plane.so>