1
0
mirror of https://github.com/BookStackApp/BookStack.git synced 2024-10-30 07:32:39 +01:00
BookStack/resources/views/users
Dan Brown e765e61854
Addressed user detail harvesting issue
Altered access & usage of the /search/users/select endpoint with the
following changes:
- Removed searching of email address to prevent email detail discovery
  via hunting via search queries.
- Required the user to be logged in and have permission to manage users
  or manage permissions on items in some way.
- Removed the user migration option on user delete unless they have
  permission to manage users.

For #3108
Reported in https://huntr.dev/bounties/135f2d7d-ab0b-4351-99b9-889efac46fca/
Reported by @haxatron
2021-12-14 18:47:22 +00:00
..
api-tokens Reorgranised blade view files to form a convention 2021-08-22 13:17:32 +01:00
parts Continued review of #2169 2021-10-06 23:05:26 +01:00
create.blade.php Reorgranised blade view files to form a convention 2021-08-22 13:17:32 +01:00
delete.blade.php Addressed user detail harvesting issue 2021-12-14 18:47:22 +00:00
edit.blade.php Reorgranised blade view files to form a convention 2021-08-22 13:17:32 +01:00
index.blade.php Reorgranised blade view files to form a convention 2021-08-22 13:17:32 +01:00
profile.blade.php Reorgranised blade view files to form a convention 2021-08-22 13:17:32 +01:00