Commit e320ea1
Always replace User Placeholders with username
MantisBT 2.12.0 changed the way to control the display of users' real
name.
Because of this, user Placeholders were replaced by the realname instead
of the username if the following configuration is used and the current
user's access level is >= $g_show_user_realname_threshold:
$g_show_realname = ON;
$g_show_user_realname_threshold = DEVELOPER;
When using such a snippet, real names would be stored in the database,
and thus become visible to any user, even those who are not allowed to
view real names.
To avoid the problem, we now always replace User Placeholders with the
username, regardless of show_realname settings.
Fixes #37
Signed-off-by: Damien Regad <[email protected]>
Original commit message reworded.1 parent 2c52034 commit e320ea1
1 file changed
+4
-4
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
140 | 140 | | |
141 | 141 | | |
142 | 142 | | |
143 | | - | |
| 143 | + | |
144 | 144 | | |
145 | 145 | | |
146 | | - | |
| 146 | + | |
147 | 147 | | |
148 | 148 | | |
149 | 149 | | |
150 | | - | |
| 150 | + | |
151 | 151 | | |
152 | | - | |
| 152 | + | |
153 | 153 | | |
154 | 154 | | |
155 | 155 | | |
| |||
0 commit comments