This repository was archived by the owner on Dec 23, 2023. It is now read-only.
This repository was archived by the owner on Dec 23, 2023. It is now read-only.
API public permissions always reachable #81
Description
Hi everybody,
I want to notice you that:
- POST /api/editorjs/image/byFile returns status 200
- POST /api/editorjs/image/byUrl returns status 500
- GET /api/editorjs/link returns status 200
even if they are disabled in the Strapi permissions panel.
Maybe could a security issue.
Thank you.