Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 01:10:43 +08:00
Code Packages Activity Actions
discourse/lib/topic_query
History
Exact
discoursebot 9092403a46
 SECURITY: Restrict tagged group message lists [backport 2026.1] (#41392) 
Backport of #41342 to release/2026.1.

---

Filter combined private-message group IDs through group-message
visibility so tagged PM lists do not include group topics the viewer
cannot access.

Co-authored-by: Natalie Tay <natalie@discourse.org>
2026-07-06 12:18:30 +08:00
..
private_message_lists.rb SECURITY: Restrict tagged group message lists [backport 2026.1] (#41392) 2026-07-06 12:18:30 +08:00