On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection.
Simon Scannell of SonarSource
Yes
2022-01-06 (about 7 months ago)
2022-01-06 (about 7 months ago)
2022-04-13 (about 3 months ago)