fix search/new against possible email leakage

diff --git a/include/conversation.php b/include/conversation.php
index ff68462abdd84b58df3d1804d2a17adc722ea824..6bf673b97fa658fb5faa76c37a3aad3c3dd1622c 100644 (file)
--- a/include/conversation.php
+++ b/include/conversation.php
@@ -278,6 +278,9 @@ function conversation(&$a, $items, $mode, $update, $preview = false) {
                                else
                                        $nickname = $a->user['nickname'];
                                
+                               // prevent private email from leaking.
+                               if($item['network'] === NETWORK_MAIL && local_user() != $item['uid'])
+                                               continue;
                        
                                $profile_name   = ((strlen($item['author-name']))   ? $item['author-name']   : $item['name']);
                                if($item['author-link'] && (! $item['author-name']))