mirror of
https://gh.wpcy.net/https://github.com/discourse/discourse.git
synced 2026-05-28 01:19:30 +08:00
7155883b6b
`GroupPostSerializer` declared `include_user_long_name?` as the predicate for its `:name` attribute, but AMS looks for `include_name?`. The misnamed predicate was never called, so object.user.name was always serialized regardless of `SiteSetting.enable_names`. https://github.com/discourse/discourse/security/advisories/GHSA-h3mq-9r6w-h33j |
||
|---|---|---|
| .. | ||
| custom_reactions_controller_custom_emoji_spec.rb | ||
| custom_reactions_controller_spec.rb | ||
| post_action_users_controller_spec.rb | ||
| topics_controller_spec.rb | ||
