[wp-trac] [WordPress Trac] #59866: Attachment pages are only disabled for users that are logged in

[WordPress Trac]

#59866: Attachment pages are only disabled for users that are logged in
--------------------------------------+----------------------------
 Reporter:  joppuyo                   |       Owner:  peterwilsoncc
     Type:  defect (bug)              |      Status:  closed
 Priority:  normal                    |   Milestone:  6.4.3
Component:  Media                     |     Version:  6.4
 Severity:  normal                    |  Resolution:  fixed
 Keywords:  has-patch has-unit-tests  |     Focuses:
--------------------------------------+----------------------------
Changes (by jorbin):

 * status:  reopened => closed
 * resolution:   => fixed


Comment:

 In [changeset:"57357" 57357]:
 {{{
 #!CommitTicketReference repository="" revision="57357"
 Media: Redirect inactive attachment pages for logged-out users.

 Ensure logged out users are redirected to the media file when attachment
 pages are inactive. This removes the read_post capability check from the
 canonical redirects as anonymous users lack the permission.

 This was previously committed in [57310] before being reverted in [57318].
 This update includes a fix to cover instances where revealing a URL could
 be considered a data leak and greatly expands the unit tests to ensure
 that this is covered along with many other instances.

 Follow-up to [56657], [56658], [56711], [57310], [57318].

 Props peterwilsoncc, jorbin, afercia, aristath, chesio, joppuyo, jorbin,
 lakshmananphp, poena, sergeybiryukov, swissspidy, johnbillion.
 Fixes #59866.
 See #57913.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/59866#comment:42>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform