forgejo/routers/web
Giteabot d7408d8b0b
Dont leak private users via extensions (#28023) (#28028)
Backport #28023 by @6543

there was no check in place if a user could see a other user, if you
append e.g. `.rss`

(cherry picked from commit 69ea554e23)
2023-11-14 13:17:12 +01:00
..
admin
auth
devtest
events
explore
feed
healthcheck
misc
org
repo
shared
user
auth.go
auth_windows.go
base.go
githttp.go
goget.go
home.go
metrics.go
nodeinfo.go
swagger_json.go
web.go
webfinger.go