emqx/changes/ce/fix-13024.en.md
zmstone 290ebe2fc5 fix: deny subscribing to +/# by default ACL
Prior to this change, EMQX default ACL has a deny rule to reject
subscribing to `#`.
For completeness, the default ACL should also deny `+/#` because
they are essentially equivalent.
2024-05-13 09:26:42 +02:00

175 B

Add a default ACL deny-rule to reject subscription to +/# topic.

Since EMQX by default rejects subscription to # topic, for completeness, it should reject +/# as well.