Private source code is exposed when 2 or more source locations in issue

[julienlancelot]

Next time, you can use this process Responsible Vulnerability Disclosure to report such issue, thanks !