Replace find_by_any_email with with_public_email for enhanced user privacy
In order to protect user privacy and prevent the inference of a user's name from their GitLab profile, it is recommended to replace the usage of the find_by_any_email
method with the with_public_email
method.
This change was suggested in this thread to address the privacy concerns related to user information.
The modification should be implemented in the following file: lib/gitlab/git/wiki_page_version.rb
Update:
Based on this discussion, everyone agreed to make this behaviour as a documentation change: Any verified emails linked to a user account can be used to match commits, this includes non-public emails.
We will proceed with making this documentation change in https://docs.gitlab.com/ee/user/profile/#add-emails-to-your-user-profile by incorporating a note beneath this section.