Bug internalDataAdapter visibility is set to public

[K a M a L]

We've created an addon to serve attachments directly from S3 using S3 presigned URLs instead of routing through xenforo attachment controller .. we noticed that signed URLs keep working after expiry and after removing the signing secret .. checking the bucket, I found that attachments visibility is set to public ( bucket setting is set to private ) .. tracking the code I found the issue here
PHP:

$internalData = new EventableFilesystem($internalDataAdapter, [
            'visibility' =>...

Read more

Continue reading...