Files
Niels Beier c78d9fff56 test(pubsub): cover GetSecurityKeys without a session user name
Grants the object-level check unconditionally, as the stock plugin
does, and asserts that an anonymously activated session still gets
BadUserAccessDenied from GetSecurityKeys.

Internal Vulnerability Advisory: open62541-SA-2026-0056
Co-Authored-By: Jason Huibin Wang <jasontimwong@users.noreply.github.com>
2026-10-17 14:13:01 +02:00
..