BookStack/app/Http
Dan Brown e765e61854
Addressed user detail harvesting issue
Altered access & usage of the /search/users/select endpoint with the
following changes:
- Removed searching of email address to prevent email detail discovery
  via hunting via search queries.
- Required the user to be logged in and have permission to manage users
  or manage permissions on items in some way.
- Removed the user migration option on user delete unless they have
  permission to manage users.

For #3108
Reported in https://huntr.dev/bounties/135f2d7d-ab0b-4351-99b9-889efac46fca/
Reported by @haxatron
2021-12-14 18:47:22 +00:00
..
Controllers Addressed user detail harvesting issue 2021-12-14 18:47:22 +00:00
Middleware Applied StyleCI changes 2021-11-30 14:25:09 +00:00
Requests Change application namespace to BookStack 2015-09-10 19:31:09 +01:00
Kernel.php Laravel 8 shift squash & merge (#3029) 2021-10-30 21:29:59 +01:00
Request.php Apply fixes from StyleCI 2021-06-26 15:23:15 +00:00