Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-06-26 06:51:41 +02:00
Code Issues Packages Projects Releases Wiki Activity

backport xss fix

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2016-09-26 17:10:39 +03:00
committed by GitHub
parent 1fefc8d427
commit 2dec354131
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
src/controllers/accounts/helpers.js
View File

@@ -109,6 +109,7 @@ helpers.getUserDataByUserSlug = function(userslug, callerUID, callback) {
userData.location = validator.escape(userData.location || '');
userData.signature = validator.escape(userData.signature || '');
userData.aboutme = validator.escape(userData.aboutme || '');
userData.birthday = validator.escape(userData.birthday || '');
userData['cover:url'] = userData['cover:url'] || require('../../coverPhoto').getDefaultProfileCover(userData.uid);
userData['cover:position'] = userData['cover:position'] || '50% 50%';