Sam Saffron ad93fc959c security issue, anon and logged in users could see the fact that a user sent another user a pm (but could not see the pm itself or title)

2013-10-03 16:48:03 -07:00

..

post_serializer_spec.rb

security issue, anon and logged in users could see the fact that a user sent another user a pm (but could not see the pm itself or title)

2013-10-03 16:48:03 -07:00