1
0
Fork 1
Spiegel von https://github.com/dani-garcia/vaultwarden.git synchronisiert 2024-11-22 05:10:29 +01:00
vaultwarden/src/db
Mathijs van Veluw 13f4b66e62
Hide user name on invite status (#5110)
A possible user disclosure when you invite an user into an organization which already has an account on the same instance.
This was because we always returned the user's name.
To prevent this, this PR only returns the user's name if the status is accepted or higher, else we will return null.
This is the same as Bitwarden does.

Resolves a reported issue.

Also resolved a new `nightly` reported clippy regarding a regex within a loop.
2024-10-19 18:22:21 +02:00
..
models Hide user name on invite status (#5110) 2024-10-19 18:22:21 +02:00
schemas Actually use Device Type for mails (#4916) 2024-09-18 19:03:15 +02:00
mod.rs Add extra linting (#4977) 2024-09-23 20:25:32 +02:00