Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-05 18:46:18 +08:00
Code Packages Activity Actions
discourse/lib/topic_query
History
Exact
discoursebot 4108bd2f38
 SECURITY: Restrict tagged group message lists [backport 2026.6] (#41390) 
Backport of #41342 to release/2026.6.

---

Filter combined private-message group IDs through group-message
visibility so tagged PM lists do not include group topics the viewer
cannot access.

Co-authored-by: Natalie Tay <natalie@discourse.org>
2026-07-06 12:18:41 +08:00
..
private_message_lists.rb SECURITY: Restrict tagged group message lists [backport 2026.6] (#41390) 2026-07-06 12:18:41 +08:00