forgejo/services
wxiaoguang 4fd8ac0653
Fix API leaking Usermail if not logged in (#25097) (#26350)
Backport #25097

The API should only return the real Mail of a User, if the caller is
logged in. The check do to this don't work. This PR fixes this. This not
really a security issue, but can lead to Spam.

Co-authored-by: JakobDev <jakobdev@gmx.de>
Co-authored-by: silverwind <me@silverwind.io>
2023-08-06 20:11:39 +08:00
..
actions Fix pull request check list is limited (#26179) (#26245) 2023-07-31 08:56:46 +00:00
agit Use the type RefName for all the needed places and fix pull mirror sync bugs (#24634) 2023-05-26 01:04:48 +00:00
asymkey Add context cache as a request level cache (#22294) 2023-02-15 21:37:34 +08:00
attachment Preserve file size when creating attachments (#23406) 2023-03-12 03:48:07 -04:00
auth Fix SSPI auth panic (#25955) (#25969) 2023-07-18 22:28:06 +00:00
automerge Improve queue and logger context (#24924) 2023-05-26 07:31:55 +00:00
context Replace interface{} with any (#25686) (#25687) 2023-07-04 23:41:32 -04:00
convert Fix API leaking Usermail if not logged in (#25097) (#26350) 2023-08-06 20:11:39 +08:00
cron Replace interface{} with any (#25686) (#25687) 2023-07-04 23:41:32 -04:00
externalaccount Replace interface{} with any (#25686) (#25687) 2023-07-04 23:41:32 -04:00
forms Use "utf8mb4" for MySQL by default (#25432) 2023-06-22 07:38:23 +02:00
gitdiff Show outdated comments in files changed tab (#24936) (#25428) 2023-06-22 08:34:42 +00:00
issue Rename NotifyPullReviewRequest to NotifyPullRequestReviewRequest (#24988) 2023-05-31 15:54:46 +08:00
lfs Replace interface{} with any (#25686) (#25687) 2023-07-04 23:41:32 -04:00
mailer Replace interface{} with any (#25686) (#25687) 2023-07-04 23:41:32 -04:00
markup Decouple the different contexts from each other (#24786) 2023-05-21 09:50:53 +08:00
migrations Replace interface{} with any (#25686) (#25687) 2023-07-04 23:41:32 -04:00
mirror Replace interface{} with any (#25686) (#25687) 2023-07-04 23:41:32 -04:00
org Refactor rename user and rename organization (#24052) 2023-05-21 23:13:47 +08:00
packages Prevent newline errors with Debian packages (#26332) (#26342) 2023-08-05 11:41:30 +02:00
pull Fix pull request check list is limited (#26179) (#26245) 2023-07-31 08:56:46 +00:00
release Use the type RefName for all the needed places and fix pull mirror sync bugs (#24634) 2023-05-26 01:04:48 +00:00
repository Fix bugs in LFS meta garbage collection (#26122) (#26157) 2023-07-26 11:53:15 +00:00
task Replace interface{} with any (#25686) (#25687) 2023-07-04 23:41:32 -04:00
user fix incorrect repo url when changed the case of ownername (#25733) (#25881) 2023-07-15 19:47:24 +02:00
webhook Warn instead of reporting an error when a webhook cannot be found (#26039) (#26211) 2023-07-29 14:47:46 +00:00
wiki Improve wiki user title test (#24559) 2023-05-06 11:24:18 +00:00