Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-05 20:29:55 +08:00
Code Packages Activity Actions
discourse/lib/topic_query
History
Exact
discoursebot 252afd4866
 SECURITY: Restrict tagged group message lists [backport 2026.5] (#41391) 
Backport of #41342 to release/2026.5.

---

Filter combined private-message group IDs through group-message
visibility so tagged PM lists do not include group topics the viewer
cannot access.

Co-authored-by: Natalie Tay <natalie@discourse.org>
2026-07-06 12:18:36 +08:00
..
private_message_lists.rb SECURITY: Restrict tagged group message lists [backport 2026.5] (#41391) 2026-07-06 12:18:36 +08:00