26

Following up on this post;

Despite the message:

Note: only content you own is returned when searching for deleted content

I'm able to search a specific user's deleted content using a search query such as:

user:X deleted:all

Where X is the user ID:

s1

As far as I know not even 10K+ users should be able to do this.

Improve this question
3
  • 1
    You surely deserve the hacker badge for all those efforts! :D
    – Shadow Wizard
    Commented Dec 16, 2015 at 15:26
  • 7
    @ShadowWizard If they leave the privilege to me I'll call it even. :D
    – kos
    Commented Dec 16, 2015 at 15:36
  • Wow, very nice find.
    – Wildcard
    Commented Dec 31, 2015 at 2:25

1 Answer 1

Reset to default
17

Fun fact: deleted:all is not actually a valid search argument. We only accept values 1, 0, true, false, yes, no.

Fun fact #1.5: The above fun fact isn't technically correct. deleted:all is acceptable and produces results that include both deleted and "live" posts.

Fun fact #2: the fact that it was a not-clearly-true-or-false is what broke this. deleted:hedgehog or deleted:banana would have produced the same result. :)

I fixed this harder, so deleted:all should work again but the results for searches by 10k users will still be constrained appropriately.

Improve this answer
3
  • I love your "Fun fact" way of explaining this. :) Another example of why it's vital to always sanitize/verify user input.
    – Wildcard
    Commented Dec 31, 2015 at 2:27
  • 1
    Ah! Yes, fun facts all. Sad fact: apparently you fixed that for good. :(
    – kos
    Commented Dec 31, 2015 at 3:41
  • Missed those fun facts. feature-request: use them more! :D
    – Shadow Wizard
    Commented Dec 31, 2015 at 8:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .