emqx/changes/ce/fix-13024.en.md
zmstone 290ebe2fc5 fix: deny subscribing to +/# by default ACL
Prior to this change, EMQX default ACL has a deny rule to reject
subscribing to `#`.
For completeness, the default ACL should also deny `+/#` because
they are essentially equivalent.
2024-05-13 09:26:42 +02:00

4 lines
175 B
Markdown

Add a default ACL deny-rule to reject subscription to `+/#` topic.
Since EMQX by default rejects subscription to `#` topic, for completeness, it should reject `+/#` as well.