mirror of
https://github.com/discourse/discourse.git
synced 2026-08-06 13:08:40 +08:00
e56bd3ec58## Summary Prevent unauthorized access to private message excerpts in reviewable responses by ensuring companion conversations are only serialized when the viewer has permission to see the underlying topic. The patch also ensures category moderators receive legitimate access to post-voting flag conversations by including the relevant moderation groups in the private message recipient list. ## Source - Patch Triage: https://patch.discourse.org/patch-triage/1282 Co-authored-by: discourse-patch-triage <272280883+discourse-patch-triage[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| components/post_voting | ||
| fabricators | ||
| lib | ||
| models | ||
| requests | ||
| serializers | ||
| system | ||
| plugin_helper.rb | ||
