mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-11-17 03:01:08 +01:00
escape event data
This commit is contained in:
@@ -1,13 +1,13 @@
|
||||
|
||||
'use strict';
|
||||
|
||||
var async = require('async'),
|
||||
|
||||
db = require('./database'),
|
||||
batch = require('./batch'),
|
||||
user = require('./user'),
|
||||
utils = require('../public/src/utils');
|
||||
|
||||
var async = require('async');
|
||||
var validator = require('validator');
|
||||
|
||||
var db = require('./database');
|
||||
var batch = require('./batch');
|
||||
var user = require('./user');
|
||||
var utils = require('../public/src/utils');
|
||||
|
||||
(function(events) {
|
||||
events.log = function(data, callback) {
|
||||
@@ -54,6 +54,11 @@ var async = require('async'),
|
||||
},
|
||||
function(eventsData, next) {
|
||||
eventsData.forEach(function(event) {
|
||||
Object.keys(event).forEach(function(key) {
|
||||
if (typeof event[key] === 'string') {
|
||||
event[key] = validator.escape(String(event[key] || ''));
|
||||
}
|
||||
});
|
||||
var e = utils.merge(event);
|
||||
e.eid = e.uid = e.type = e.ip = e.user = undefined;
|
||||
event.jsonString = JSON.stringify(e, null, 4);
|
||||
|
||||
Reference in New Issue
Block a user