wxiaoguang 4fd8ac0653

Fix API leaking Usermail if not logged in (#25097) (#26350) ...

Backport #25097

The API should only return the real Mail of a User, if the caller is
logged in. The check do to this don't work. This PR fixes this. This not
really a security issue, but can lead to Spam.

Co-authored-by: JakobDev <jakobdev@gmx.de>
Co-authored-by: silverwind <me@silverwind.io>

2023-08-06 20:11:39 +08:00

..

activity.go

For API attachments, use API URL (#25639) (#25814)

2023-07-10 12:56:16 +00:00

attachment.go

For API attachments, use API URL (#25639) (#25814)

2023-07-10 12:56:16 +00:00

convert.go

add admin API email endpoints (#22792)

2023-03-14 03:54:40 -04:00

git_commit_test.go

Move convert package to services (#22264)

2022-12-29 10:57:15 +08:00

git_commit.go

Filter get single commit (#24613)

2023-05-10 09:34:07 +08:00

issue_comment.go

For API attachments, use API URL (#25639) (#25814)

2023-07-10 12:56:16 +00:00

issue_test.go

Move convert package to services (#22264)

2022-12-29 10:57:15 +08:00

issue.go

For API attachments, use API URL (#25639) (#25814)

2023-07-10 12:56:16 +00:00

main_test.go

Move convert package to services (#22264)

2022-12-29 10:57:15 +08:00

mirror.go

Fix SyncOnCommit always return false in API of push_mirrors (#23088)

2023-02-23 15:50:33 -06:00

notification.go

Fix Permission in API returned repository struct (#25388) (#25441)

2023-06-22 17:01:42 +02:00

package.go

Fix Permission in API returned repository struct (#25388) (#25441)

2023-06-22 17:01:42 +02:00

pull_review.go

Add context cache as a request level cache (#22294)

2023-02-15 21:37:34 +08:00

pull_test.go

Fix Permission in API returned repository struct (#25388) (#25441)

2023-06-22 17:01:42 +02:00

pull.go

Fix Permission in API returned repository struct (#25388) (#25441)

2023-06-22 17:01:42 +02:00

release.go

For API attachments, use API URL (#25639) (#25814)

2023-07-10 12:56:16 +00:00

repository.go

Fix Permission in API returned repository struct (#25388) (#25441)

2023-06-22 17:01:42 +02:00

status.go

Add context cache as a request level cache (#22294)

2023-02-15 21:37:34 +08:00

user_test.go

Add context cache as a request level cache (#22294)

2023-02-15 21:37:34 +08:00

user.go

Fix API leaking Usermail if not logged in (#25097) (#26350)

2023-08-06 20:11:39 +08:00

utils_test.go

Rewrite queue (#24505)

2023-05-08 19:49:59 +08:00

utils.go

Move convert package to services (#22264)

2022-12-29 10:57:15 +08:00

wiki.go

Make wiki title supports dashes and improve wiki name related features (#24143)

2023-04-19 13:50:10 -04:00