epriestley f59ebf4c09 Fix incorrect key handling in extended policy filtering ... Summary: Via HackerOne. The use of `$key` here should be `$extended_key`. Exploiting this requires a very unusual group of objects to be subjected to extended policy checks. I believe there is no way to actually get anything bad through the policy filter today, but this could have been an issue in the future. Test Plan: - Added a unit test which snuck something through the policy filter. - Fixed use of `$extended_key`. - Test now passes. Reviewers: chad Reviewed By: chad Differential Revision: https://secure.phabricator.com/D14993		2016-01-11 07:04:47 -08:00
..
PhabricatorPolicyAwareTestQuery.php	Fix method visibility for PhabricatorPolicyAwareQuery subclasses	2015-01-14 07:01:16 +11:00
PhabricatorPolicyDataTestCase.php	Prepare Projects schema for subprojects	2015-12-19 09:21:36 -08:00
PhabricatorPolicyTestCase.php	Fix incorrect key handling in extended policy filtering	2016-01-11 07:04:47 -08:00
PhabricatorPolicyTestObject.php	Extend from Phobject	2015-06-15 18:02:27 +10:00