NodeBB / NodeBB / 27560078687

push

github

fix(topics): add source category privilege check to crossposts and fix system uid

- Add topics:read privilege check on source category in crossposts.add()
  to prevent information leakage from restricted categories
- Fix createCrosspost in queue.js to pass 0 instead of 'system' for
  system crosspost uid, matching the documented convention in
  crossposts.add()
- Add test for source category topics:read privilege guard

Assisted-by: unsloth/Qwen3.6-35B-A3B-GGUF

14110 of 19261 branches covered (73.26%)

2 of 3 new or added lines in 2 files covered. (66.67%)

29456 of 34484 relevant lines covered (85.42%)

3476.05 hits per line