Comment 13 for bug 2030976

Revision history for this message
Dan Smith (danms) wrote :

Sure, but notifications contain much more information than users should see as it is, so if they're exposing them to untrusted people they already have a problem. There's no tenant isolation in the notification bus, for example. But yeah if it leads to persisting the whole notification somewhere else, it does increase the surface by which someone could potentially see those things. Disabling would work, as would using one of the other drivers, as far as I can tell.