From c715dadb1162ca6a1b1e5deec4303a937722fb68 Mon Sep 17 00:00:00 2001
From: Roman <mail@romanh.de>
Date: Tue, 23 Apr 2024 14:29:08 +0200
Subject: [PATCH] settings/get: fix information disclosure

---
 Core/API/SettingsAPI.class.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Core/API/SettingsAPI.class.php b/Core/API/SettingsAPI.class.php
index 095f5e3..ef577c4 100644
--- a/Core/API/SettingsAPI.class.php
+++ b/Core/API/SettingsAPI.class.php
@@ -57,7 +57,7 @@ namespace Core\API\Settings {
        $key = $this->getParam("key");
        $sql = $this->context->getSQL();
 
-       $settings = Settings::getAll($sql, $key);
+       $settings = Settings::getAll($sql, $key, $this->isExternalCall());
        if ($settings !== null) {
          $this->result["settings"] = $settings;
        } else {