mirror of
https://github.com/discourse/discourse.git
synced 2026-08-04 10:39:43 +08:00
02bc3862c0## Summary Chat-integration notification payloads built outbound titles from unfiltered topic tags, so tag names hidden from the configured integration user could be sent to external chat systems. The patch adds a shared display-tag helper that filters tags through the integration user's Guardian and applies it across all eight tag-rendering providers, preventing disclosure of hidden tags in notification titles. ## Source - Patch Triage: https://patch.discourse.org/patch-triage/1590 Co-authored-by: discourse-patch-triage <272280883+discourse-patch-triage[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| fabricators | ||
| helpers | ||
| integration | ||
| jobs | ||
| lib | ||
| models | ||
| requests | ||
| services | ||
| support | ||
| system | ||
| dummy_provider.rb | ||
