forked from gitea/gitea
1
0
Fork 0
gitea/services/convert
wxiaoguang 4fd8ac0653
Fix API leaking Usermail if not logged in (#25097) (#26350)
Backport #25097

The API should only return the real Mail of a User, if the caller is
logged in. The check do to this don't work. This PR fixes this. This not
really a security issue, but can lead to Spam.

Co-authored-by: JakobDev <jakobdev@gmx.de>
Co-authored-by: silverwind <me@silverwind.io>
2023-08-06 20:11:39 +08:00
..
activity.go For API attachments, use API URL (#25639) (#25814) 2023-07-10 12:56:16 +00:00
attachment.go For API attachments, use API URL (#25639) (#25814) 2023-07-10 12:56:16 +00:00
convert.go add admin API email endpoints (#22792) 2023-03-14 03:54:40 -04:00
git_commit.go Filter get single commit (#24613) 2023-05-10 09:34:07 +08:00
git_commit_test.go Move `convert` package to services (#22264) 2022-12-29 10:57:15 +08:00
issue.go For API attachments, use API URL (#25639) (#25814) 2023-07-10 12:56:16 +00:00
issue_comment.go For API attachments, use API URL (#25639) (#25814) 2023-07-10 12:56:16 +00:00
issue_test.go Move `convert` package to services (#22264) 2022-12-29 10:57:15 +08:00
main_test.go Move `convert` package to services (#22264) 2022-12-29 10:57:15 +08:00
mirror.go Fix SyncOnCommit always return false in API of push_mirrors (#23088) 2023-02-23 15:50:33 -06:00
notification.go Fix `Permission` in API returned repository struct (#25388) (#25441) 2023-06-22 17:01:42 +02:00
package.go Fix `Permission` in API returned repository struct (#25388) (#25441) 2023-06-22 17:01:42 +02:00
pull.go Fix `Permission` in API returned repository struct (#25388) (#25441) 2023-06-22 17:01:42 +02:00
pull_review.go Add context cache as a request level cache (#22294) 2023-02-15 21:37:34 +08:00
pull_test.go Fix `Permission` in API returned repository struct (#25388) (#25441) 2023-06-22 17:01:42 +02:00
release.go For API attachments, use API URL (#25639) (#25814) 2023-07-10 12:56:16 +00:00
repository.go Fix `Permission` in API returned repository struct (#25388) (#25441) 2023-06-22 17:01:42 +02:00
status.go Add context cache as a request level cache (#22294) 2023-02-15 21:37:34 +08:00
user.go Fix API leaking Usermail if not logged in (#25097) (#26350) 2023-08-06 20:11:39 +08:00
user_test.go Add context cache as a request level cache (#22294) 2023-02-15 21:37:34 +08:00
utils.go Move `convert` package to services (#22264) 2022-12-29 10:57:15 +08:00
utils_test.go Rewrite queue (#24505) 2023-05-08 19:49:59 +08:00
wiki.go Make wiki title supports dashes and improve wiki name related features (#24143) 2023-04-19 13:50:10 -04:00