mirror of
1
Fork 0
forgejo/services
JakobDev d89003cc1b Fix API leaking Usermail if not logged in (#25097)
The API should only return the real Mail of a User, if the caller is
logged in. The check do to this don't work. This PR fixes this. This not
really a security issue, but can lead to Spam.

---------

Co-authored-by: silverwind <me@silverwind.io>
(cherry picked from commit ea385f5d39)
2023-08-05 11:43:54 +00:00
..
actions For API attachments, use API URL (#25639) (#25814) 2023-07-10 12:56:16 +00:00
agit Use the type RefName for all the needed places and fix pull mirror sync bugs (#24634) 2023-05-26 01:04:48 +00:00
asymkey Add context cache as a request level cache (#22294) 2023-02-15 21:37:34 +08:00
attachment Preserve file size when creating attachments (#23406) 2023-03-12 03:48:07 -04:00
auth Fix SSPI auth panic (#25955) (#25969) 2023-07-24 07:58:56 +02:00
automerge Improve queue and logger context (#24924) 2023-05-26 07:31:55 +00:00
context Replace `interface{}` with `any` (#25686) (#25687) 2023-07-04 23:41:32 -04:00
convert Fix API leaking Usermail if not logged in (#25097) 2023-08-05 11:43:54 +00:00
cron [GITEA] Show manual cron run's last time 2023-07-31 18:34:14 +00:00
externalaccount Replace `interface{}` with `any` (#25686) (#25687) 2023-07-04 23:41:32 -04:00
forms Use "utf8mb4" for MySQL by default (#25432) 2023-06-22 07:38:23 +02:00
gitdiff Show outdated comments in files changed tab (#24936) (#25428) 2023-06-22 08:34:42 +00:00
issue [MODERATION] user blocking 2023-07-17 00:26:42 +02:00
lfs Replace `interface{}` with `any` (#25686) (#25687) 2023-07-04 23:41:32 -04:00
mailer [BRANDING] add X-Forgejo-* headers 2023-07-17 00:25:55 +02:00
markup Decouple the different contexts from each other (#24786) 2023-05-21 09:50:53 +08:00
migrations Replace `interface{}` with `any` (#25686) (#25687) 2023-07-04 23:41:32 -04:00
mirror Replace `interface{}` with `any` (#25686) (#25687) 2023-07-04 23:41:32 -04:00
org Refactor rename user and rename organization (#24052) 2023-05-21 23:13:47 +08:00
packages Fix version in rpm repodata/primary.xml.gz (#26009) (#26048) 2023-07-24 07:59:10 +02:00
pull Fix bug when pushing to a pull request which enabled dismiss approval automatically (#25882) (#26158) 2023-07-30 07:46:18 +02:00
release Use the type RefName for all the needed places and fix pull mirror sync bugs (#24634) 2023-05-26 01:04:48 +00:00
repository Fix bugs in LFS meta garbage collection (#26122) (#26157) 2023-07-30 07:43:05 +02:00
task Replace `interface{}` with `any` (#25686) (#25687) 2023-07-04 23:41:32 -04:00
user [MODERATION] organization blocking a user (#802) 2023-07-17 00:26:42 +02:00
webhook Warn instead of reporting an error when a webhook cannot be found (#26039) (#26211) 2023-07-30 07:46:19 +02:00
wiki Improve wiki user title test (#24559) 2023-05-06 11:24:18 +00:00