forgejo/services
wxiaoguang 4fd8ac0653
Fix API leaking Usermail if not logged in () ()
Backport 

The API should only return the real Mail of a User, if the caller is
logged in. The check do to this don't work. This PR fixes this. This not
really a security issue, but can lead to Spam.

Co-authored-by: JakobDev <jakobdev@gmx.de>
Co-authored-by: silverwind <me@silverwind.io>
2023-08-06 20:11:39 +08:00
..
actions Fix pull request check list is limited () () 2023-07-31 08:56:46 +00:00
agit Use the type RefName for all the needed places and fix pull mirror sync bugs () 2023-05-26 01:04:48 +00:00
asymkey Add context cache as a request level cache () 2023-02-15 21:37:34 +08:00
attachment Preserve file size when creating attachments () 2023-03-12 03:48:07 -04:00
auth Fix SSPI auth panic () () 2023-07-18 22:28:06 +00:00
automerge Improve queue and logger context () 2023-05-26 07:31:55 +00:00
context Replace interface{} with any () () 2023-07-04 23:41:32 -04:00
convert Fix API leaking Usermail if not logged in () () 2023-08-06 20:11:39 +08:00
cron Replace interface{} with any () () 2023-07-04 23:41:32 -04:00
externalaccount Replace interface{} with any () () 2023-07-04 23:41:32 -04:00
forms Use "utf8mb4" for MySQL by default () 2023-06-22 07:38:23 +02:00
gitdiff Show outdated comments in files changed tab () () 2023-06-22 08:34:42 +00:00
issue Rename NotifyPullReviewRequest to NotifyPullRequestReviewRequest () 2023-05-31 15:54:46 +08:00
lfs Replace interface{} with any () () 2023-07-04 23:41:32 -04:00
mailer Replace interface{} with any () () 2023-07-04 23:41:32 -04:00
markup Decouple the different contexts from each other () 2023-05-21 09:50:53 +08:00
migrations Replace interface{} with any () () 2023-07-04 23:41:32 -04:00
mirror Replace interface{} with any () () 2023-07-04 23:41:32 -04:00
org Refactor rename user and rename organization () 2023-05-21 23:13:47 +08:00
packages Prevent newline errors with Debian packages () () 2023-08-05 11:41:30 +02:00
pull Fix pull request check list is limited () () 2023-07-31 08:56:46 +00:00
release Use the type RefName for all the needed places and fix pull mirror sync bugs () 2023-05-26 01:04:48 +00:00
repository Fix bugs in LFS meta garbage collection () () 2023-07-26 11:53:15 +00:00
task Replace interface{} with any () () 2023-07-04 23:41:32 -04:00
user fix incorrect repo url when changed the case of ownername () () 2023-07-15 19:47:24 +02:00
webhook Warn instead of reporting an error when a webhook cannot be found () () 2023-07-29 14:47:46 +00:00
wiki Improve wiki user title test () 2023-05-06 11:24:18 +00:00