1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2024-12-25 13:19:37 -05:00
forgejo/services/convert
JakobDev ea385f5d39
Fix API leaking Usermail if not logged in (#25097)
The API should only return the real Mail of a User, if the caller is
logged in. The check do to this don't work. This PR fixes this. This not
really a security issue, but can lead to Spam.

---------

Co-authored-by: silverwind <me@silverwind.io>
2023-07-31 01:18:38 +00:00
..
activity.go For API attachments, use API URL (#25639) 2023-07-10 09:31:19 +00:00
attachment.go For API attachments, use API URL (#25639) 2023-07-10 09:31:19 +00:00
convert.go Allow Organisations to have a E-Mail (#25082) 2023-07-25 08:26:27 +00:00
git_commit.go Add file status for API "Get a single commit from a repository" (#16205) (#25831) 2023-07-20 16:35:47 +08:00
git_commit_test.go Move convert package to services (#22264) 2022-12-29 10:57:15 +08:00
issue.go For API attachments, use API URL (#25639) 2023-07-10 09:31:19 +00:00
issue_comment.go Add context parameter to some database functions (#26055) 2023-07-22 22:14:27 +08:00
issue_test.go Move convert package to services (#22264) 2022-12-29 10:57:15 +08:00
main_test.go Move convert package to services (#22264) 2022-12-29 10:57:15 +08:00
mirror.go Fix SyncOnCommit always return false in API of push_mirrors (#23088) 2023-02-23 15:50:33 -06:00
notification.go Fix Permission in API returned repository struct (#25388) 2023-06-22 13:08:08 +00:00
package.go Fix Permission in API returned repository struct (#25388) 2023-06-22 13:08:08 +00:00
pull.go Fix Permission in API returned repository struct (#25388) 2023-06-22 13:08:08 +00:00
pull_review.go Add context cache as a request level cache (#22294) 2023-02-15 21:37:34 +08:00
pull_test.go Fix Permission in API returned repository struct (#25388) 2023-06-22 13:08:08 +00:00
release.go For API attachments, use API URL (#25639) 2023-07-10 09:31:19 +00:00
repository.go Fix Permission in API returned repository struct (#25388) 2023-06-22 13:08:08 +00:00
status.go refactor improve NoBetterThan (#26126) 2023-07-26 08:52:07 +00:00
user.go Fix API leaking Usermail if not logged in (#25097) 2023-07-31 01:18:38 +00:00
user_test.go Add context cache as a request level cache (#22294) 2023-02-15 21:37:34 +08:00
utils.go Move convert package to services (#22264) 2022-12-29 10:57:15 +08:00
utils_test.go Rewrite queue (#24505) 2023-05-08 19:49:59 +08:00
wiki.go Make wiki title supports dashes and improve wiki name related features (#24143) 2023-04-19 13:50:10 -04:00