]> source.dussan.org Git - gitea.git/commit
projects / gitea.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c077a08) | patch
Dont leak private users via extensions (#28023) (#28028)
authorGiteabot <teabot@gitea.io>
Mon, 13 Nov 2023 23:03:56 +0000 (07:03 +0800)
committerGitHub <noreply@github.com>
Mon, 13 Nov 2023 23:03:56 +0000 (00:03 +0100)
commit69ea554e2362e5c4943c2463c2ec547bf631f18b
treec1edf3adee273eabf3b706d4c8901129fd915593tree | snapshot
parentc077a084d7bac8acc1bd247b2bd3d60835a17dedcommit | diff
Dont leak private users via extensions (#28023) (#28028)

Backport #28023 by @6543

there was no check in place if a user could see a other user, if you
append e.g. `.rss`
routers/web/user/home.go diff | blob | history
Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD: https://github.com/go-gitea/gitea