Fix milestone titles being leaked using search API when users cannot read milestones
Attach a file by drag & drop or click to upload
