Enforce board comment restrictions on the server - #372

Open

bjarn wants to merge 1 commit into

bjarn:codex/enforce-board-comment-block

bjarn commented Oct 2, 2026

Contributor

Summary

Reject the top-level Livewire comment action when the board blocks comments.
Keep the existing reply and MCP checks unchanged.
Add a regression test that confirms no comment is stored.

Security impact

A user could bypass the hidden comment interface and call the Livewire action directly.

Tests

php artisan test --compact tests/Feature/Livewire/Item/CommentsTest.php


          Enforce board comment restrictions

c4c4caa

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet