mirror of
https://github.com/discourse/discourse.git
synced 2026-08-06 01:10:43 +08:00
5e51c6ab90
Backport of #671 to release/2026.1. --- GroupPostSerializer declared include_user_long_name? as the predicate for its :name attribute, but AMS looks for include_name?. The misnamed predicate was never called, so object.user.name was always serialized regardless of SiteSetting.enable_names. https://github.com/discourse/discourse/security/advisories/GHSA-h3mq-9r6w-h33j |
||
|---|---|---|
| .. | ||
| fabricators | ||
| lib | ||
| models | ||
| reports | ||
| requests | ||
| serializers | ||
| services | ||
| system | ||
| plugin_spec.rb | ||
