42d2cb2d4e
Currently `Topic#pm_topic_count` is a count of all personal messages tagged for a given tag. As a result, any user with access to PM tags can poll a sensitive tag to determine if a new personal message has been created using that tag even if the user does not have access to the personal message. We classify this as a minor leak in sensitive information. With this commit, `Topic#pm_topic_count` is hidden from users by default unless the `display_personal_messages_tag_counts` site setting is enabled. |
||
|---|---|---|
| .. | ||
| component-test.js | ||
| create-pretender.js | ||
| create-store.js | ||
| d-editor-helper.js | ||
| deprecation-counter.js | ||
| fixture-pretender.js | ||
| notification-types-helper.js | ||
| presence-pretender.js | ||
| qunit-helpers.js | ||
| review-pretender.js | ||
| reviewable-types-helper.js | ||
| select-kit-helper.js | ||
| site-settings.js | ||
| site.js | ||
| store-pretender.js | ||
| temporary-module-helper.js | ||
| textarea-selection-helper.js | ||