1
0
Fork 0
forgejo/services
Yarden Shoham 88a03a6133
Link mentioned user in markdown only if they are visible to viewer (#21554)
We need to make sure a user can't confirm the existence of a user with
private visibility

* Follow up on #21533 

### Before
#### User

![image](https://user-images.githubusercontent.com/20454870/197357580-340911d7-1659-4fc9-a9f6-7ed6bc3476b4.png)

#### Admin

![image](https://user-images.githubusercontent.com/20454870/197357676-a8f0ae63-8f80-4221-a9b5-b6311552910a.png)

### After
#### User

![image](https://user-images.githubusercontent.com/20454870/197357536-05616edb-7821-469d-8e51-6f8cb84c1362.png)

#### Admin

![image](https://user-images.githubusercontent.com/20454870/197357703-071fe984-de79-43aa-a77c-a85b046292a4.png)

Signed-off-by: Yarden Shoham <hrsi88@gmail.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2022-10-23 17:13:52 +08:00
..
agit Add more linters to improve code readability (#19989) 2022-06-20 12:02:49 +02:00
asymkey Refactor AssertExistsAndLoadBean to use generics (#20797) 2022-08-16 10:22:25 +08:00
attachment Refactor AssertExistsAndLoadBean to use generics (#20797) 2022-08-16 10:22:25 +08:00
auth SessionUser protection against nil pointer dereference (#21358) 2022-10-06 21:50:38 +01:00
automerge Add more linters to improve code readability (#19989) 2022-06-20 12:02:49 +02:00
comments Move issues related files into models/issues (#19931) 2022-06-13 17:37:59 +08:00
context Move almost all functions' parameter db.Engine to context.Context (#19748) 2022-05-20 22:08:52 +08:00
cron Add system setting table with cache and also add cache supports for user setting (#18058) 2022-10-17 07:29:26 +08:00
externalaccount Refactor auth package (#17962) 2022-01-02 21:12:35 +08:00
forms Limit length of repo description and repo url input fields (#21119) 2022-09-16 15:19:16 +08:00
gitdiff Ignore error when retrieving changed PR review files (#21487) 2022-10-20 16:29:40 +08:00
issue Update milestone counters when issue is deleted (#21459) 2022-10-22 23:08:10 +08:00
lfs Prevent Authorization header for presigned LFS urls (#21531) 2022-10-22 21:36:44 +08:00
mailer Add team member invite by email (#20307) 2022-10-19 14:40:28 +02:00
markup Link mentioned user in markdown only if they are visible to viewer (#21554) 2022-10-23 17:13:52 +08:00
migrations Add system setting table with cache and also add cache supports for user setting (#18058) 2022-10-17 07:29:26 +08:00
mirror Add system setting table with cache and also add cache supports for user setting (#18058) 2022-10-17 07:29:26 +08:00
org move invite by mail to services package (#21513) 2022-10-20 11:23:31 +08:00
packages Replace ServeStream with ServeContent (#20903) 2022-08-25 12:05:21 -04:00
pull Add generic set type (#21408) 2022-10-12 13:18:26 +08:00
release Do not send notifications for draft releases (#21451) 2022-10-17 17:33:27 -04:00
repository Make every not exist error unwrappable to a fs.ErrNotExist (#20891) 2022-10-18 07:50:37 +02:00
task Move some files into models' sub packages (#20262) 2022-08-25 10:31:57 +08:00
user Add system setting table with cache and also add cache supports for user setting (#18058) 2022-10-17 07:29:26 +08:00
webhook Decouple HookTask from Repository (#17940) 2022-10-21 18:21:56 +02:00
wiki Add system setting table with cache and also add cache supports for user setting (#18058) 2022-10-17 07:29:26 +08:00