7a8b5cdd5c
This is in response to the security incident published in https://github.com/discourse/discourse/security/advisories/GHSA-vm3x-w6jm-j9vv. The security incident highlighted a gap in our test suite so we're adding more test cases to ensure that personal and group messages do not leak between users in the future.