shell bypass 403
UnknownSec Shell
:
/
home
/
forge
/
mpc.brannanatkinson.com
/
vendor
/
statamic
/
cms
/
src
/
GraphQL
/
Queries
/ [
drwxrwxr-x
]
upload
mass deface
mass delete
console
info server
name :
TaxonomiesQuery.php
<?php namespace Statamic\GraphQL\Queries; use Facades\Statamic\API\ResourceAuthorizer; use GraphQL\Type\Definition\Type; use Statamic\Facades\GraphQL; use Statamic\Facades\Taxonomy; use Statamic\GraphQL\Types\TaxonomyType; class TaxonomiesQuery extends Query { protected $attributes = [ 'name' => 'taxonomies', ]; public function type(): Type { return GraphQL::listOf(GraphQL::type(TaxonomyType::NAME)); } public function resolve($root, $args) { $allowed = ResourceAuthorizer::allowedSubResources('graphql', 'taxonomies'); return Taxonomy::all()->filter(fn ($taxonomy) => in_array($taxonomy->handle(), $allowed)); } }
© 2026 UnknownSec