ea385f5d39
The API should only return the real Mail of a User, if the caller is logged in. The check do to this don't work. This PR fixes this. This not really a security issue, but can lead to Spam. --------- Co-authored-by: silverwind <me@silverwind.io> |
||
|---|---|---|
| .. | ||
| avatar.go | ||
| badge.go | ||
| email_address.go | ||
| email_address_test.go | ||
| error.go | ||
| external_login_user.go | ||
| follow.go | ||
| follow_test.go | ||
| list.go | ||
| main_test.go | ||
| must_change_password.go | ||
| openid.go | ||
| openid_test.go | ||
| redirect.go | ||
| redirect_test.go | ||
| search.go | ||
| setting.go | ||
| setting_keys.go | ||
| setting_test.go | ||
| user.go | ||
| user_system.go | ||
| user_test.go | ||
| user_update.go | ||