mconf-web
mconf-web copied to clipboard
User recent activity should nnot be visible when not logged in
User recent activity (http://webconf.xx/users/username) should not be visible to unsigned users, at list when the server is configurated whith "moderate" and "not allowing account creation". It can be considered an information leakage in some case.