Branch: refs/heads/security-context-document Home: https://github.com/xwiki/xwiki-dev-llm Commit: 26ceaef3e79cb04f5c8c17eb06a5cf1c33ed7d18 https://github.com/xwiki/xwiki-dev-llm/commit/26ceaef3e79cb04f5c8c17eb06a5cf... Author: Simon Urli <[email protected]> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/conventions/security.md Log Message: ----------- [Misc] Warn against keying a security guard on the context-document identity * A page's rights guard must not assume $doc is the page itself: ?sheet and includes let a caller make another document the context document while the page keeps its author rights. * Point to resolving a constant reference or an explicit includer flag instead, and to ?sheet as an audit probe. Co-Authored-By: Claude Opus 4.8 <[email protected]> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications