f31f0b70f8
Currently `Topic#pm_topic_count` is a count of all personal messages tagged for a given tag. As a result, any user with access to PM tags can poll a sensitive tag to determine if a new personal message has been created using that tag even if the user does not have access to the personal message. We classify this as a minor leak in sensitive information. With this commit, `Topic#pm_topic_count` is hidden from users by default unless the `display_personal_messages_tag_counts` site setting is enabled. |
||
|---|---|---|
| .. | ||
| api-test.js | ||
| category-chooser-test.js | ||
| category-drop-test.js | ||
| combo-box-test.js | ||
| dropdown-select-box-test.js | ||
| email-group-user-chooser-test.js | ||
| future-date-input-test.js | ||
| list-setting-test.js | ||
| mini-tag-chooser-test.js | ||
| multi-select-test.js | ||
| notifications-button-test.js | ||
| pinned-options-test.js | ||
| single-select-test.js | ||
| tag-drop-test.js | ||
| topic-notifications-button-test.js | ||
| topic-notifications-options-test.js | ||
| user-chooser-test.js | ||