Skip to content

v5.1.5

Latest
Latest

Choose a tag to compare

View all tags
@cursor cursor released this 06 Oct 23:23
· 1 commit to 4.x since this release
v5.1.5
49959a3
This commit was signed with the committer’s verified signature.
cursoragent Cursor Agent
SSH Key Fingerprint: /ZGdxqU+YWGLYEplYKh2c36jVXjB1wQzjGRo7qwO46I
Verified
Learn about vigilant mode.

Changes

  • Restrict certificate HTML show to authenticated owners or users who can update the course (#137). Guests and signed-URL-only access are no longer allowed.
  • PDF download is unchanged: still behind auth, and both Cloudflare and Browsershot drivers render from an HTML string (they do not fetch the show URL).

Auth rules (GET lms/certificates/{course}/{user})

  • Allowed: logged-in certificate user (Auth::id() == $userId)
  • Allowed: logged-in user with can('update', $course) (admin preview)
  • Denied: guests, other users, completion-only / signed-URL guest access

Tagged from 4.x at 49959a3.

Assets 2
Loading