mirror of
https://gh.wpcy.net/https://github.com/discourse/discourse.git
synced 2026-05-21 03:19:56 +08:00
7155883b6b
`GroupPostSerializer` declared `include_user_long_name?` as the predicate for its `:name` attribute, but AMS looks for `include_name?`. The misnamed predicate was never called, so object.user.name was always serialized regardless of `SiteSetting.enable_names`. https://github.com/discourse/discourse/security/advisories/GHSA-h3mq-9r6w-h33j |
||
|---|---|---|
| .. | ||
| fabricators | ||
| lib | ||
| models | ||
| reports | ||
| requests | ||
| serializers | ||
| services | ||
| system | ||
| plugin_spec.rb | ||
