Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-02-26 16:41:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: escape confirm email in acp manage users

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2025-02-21 11:30:50 -05:00
parent c6b8256fff
commit 9bfa885392
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/controllers/admin/users.js
View File

@@ -199,7 +199,7 @@ async function loadUserInfo(callerUid, uids) {
const confirmObj = confirmObjs[index]; const confirmObj = confirmObjs[index];
user['email:expired'] = !confirmObj.expires || Date.now() >= confirmObj.expires; user['email:expired'] = !confirmObj.expires || Date.now() >= confirmObj.expires;
user['email:pending'] = confirmObj.expires && Date.now() < confirmObj.expires; user['email:pending'] = confirmObj.expires && Date.now() < confirmObj.expires;
user.emailToConfirm = confirmObj.email; user.emailToConfirm = validator.escape(String(confirmObj.email));
} }
} }
}); });