Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-05-06 08:37:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: hide private user data in api/v3/users/[uid]

Browse Source
This commit is contained in:
gasoved
2021-06-21 19:58:31 +03:00
committed by Julian Lam
parent d9e2190a6b
commit 97c8569a79
3 changed files with 55 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/controllers/write/users.js
View File

@@ -44,7 +44,9 @@ Users.exists = async (req, res) => {
};
Users.get = async (req, res) => {
helpers.formatApiResponse(200, res, await user.getUserData(req.params.uid));
const userData = await user.getUserData(req.params.uid);
const publicUserData = await user.hidePrivateData(userData, req.uid);
helpers.formatApiResponse(200, res, publicUserData);
};
Users.update = async (req, res) => {