4 ms·
Using allow/deny has been an anti-pattern for a while now (using methods is preferred). My projects are not affected, but it is nice to see this so quickly.
by clishem 9y ago
Using allow/deny has been an anti-pattern for a while now (using methods is preferred). My projects are not affected, but it is nice to see this so quickly.
- glasser 9y agoYup: https://guide.meteor.com/security.html#allow-deny https://guide.meteor.com/security.html#allow-deny I just submitted a PR to the main Meteor docs pointing there: https://github.com/meteor/docs/pull/164 https://github.com/meteor/docs/pull/164
- CombatChihuahua 9y agoYou still need to deny all/allow none in order to protect the method pattern.