forgejo/services/convert
wxiaoguang 4fd8ac0653
Fix API leaking Usermail if not logged in (#25097) (#26350)
Backport #25097

The API should only return the real Mail of a User, if the caller is
logged in. The check do to this don't work. This PR fixes this. This not
really a security issue, but can lead to Spam.

Co-authored-by: JakobDev <jakobdev@gmx.de>
Co-authored-by: silverwind <me@silverwind.io>
2023-08-06 20:11:39 +08:00
..
activity.go For API attachments, use API URL (#25639) (#25814) 2023-07-10 12:56:16 +00:00
attachment.go For API attachments, use API URL (#25639) (#25814) 2023-07-10 12:56:16 +00:00
convert.go
git_commit.go
git_commit_test.go
issue.go For API attachments, use API URL (#25639) (#25814) 2023-07-10 12:56:16 +00:00
issue_comment.go For API attachments, use API URL (#25639) (#25814) 2023-07-10 12:56:16 +00:00
issue_test.go
main_test.go
mirror.go
notification.go Fix Permission in API returned repository struct (#25388) (#25441) 2023-06-22 17:01:42 +02:00
package.go Fix Permission in API returned repository struct (#25388) (#25441) 2023-06-22 17:01:42 +02:00
pull.go Fix Permission in API returned repository struct (#25388) (#25441) 2023-06-22 17:01:42 +02:00
pull_review.go
pull_test.go Fix Permission in API returned repository struct (#25388) (#25441) 2023-06-22 17:01:42 +02:00
release.go For API attachments, use API URL (#25639) (#25814) 2023-07-10 12:56:16 +00:00
repository.go Fix Permission in API returned repository struct (#25388) (#25441) 2023-06-22 17:01:42 +02:00
status.go
user.go Fix API leaking Usermail if not logged in (#25097) (#26350) 2023-08-06 20:11:39 +08:00
user_test.go
utils.go
utils_test.go
wiki.go