Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-09-02 03:57:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

escape on the way out, fixes birthday/age calculation

Browse Source
This commit is contained in:
barisusakli
2015-04-14 14:16:06 -04:00
parent eaa442db8c
commit f7a3aef322
2 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/user/profile.js
View File

@@ -111,7 +111,6 @@ module.exports = function(User) {
}
data[field] = data[field].trim();
data[field] = validator.escape(data[field]);
if (field === 'email') {
return updateEmail(uid, data.email, next);
@@ -122,8 +121,8 @@ module.exports = function(User) {
} else if (field === 'signature') {
data[field] = S(data[field]).stripTags().s;
} else if (field === 'website') {
if (!data[field].startsWith(validator.escape('http://')) && !data[field].startsWith(validator.escape('https://'))) {
data[field] = validator.escape('http://') + data[field];
if (!data[field].startsWith('http://') && !data[field].startsWith('https://')) {
data[field] = 'http://' + data[field];
}
}