Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-11-17 11:11:04 +01:00
Code Issues Packages Projects Releases Wiki Activity

escape event data

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2016-09-27 14:23:48 +03:00
parent e2cbc8bc69
commit ad2b44220d
1 changed files with 12 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
src/events.js
View File

@@ -1,13 +1,13 @@
'use strict'; 'use strict';
var async = require('async'), var async = require('async');
var validator = require('validator');
db = require('./database'),
batch = require('./batch'), var db = require('./database');
user = require('./user'), var batch = require('./batch');
utils = require('../public/src/utils'); var user = require('./user');
var utils = require('../public/src/utils');
(function(events) { (function(events) {
events.log = function(data, callback) { events.log = function(data, callback) {
@@ -54,6 +54,11 @@ var async = require('async'),
}, },
function(eventsData, next) { function(eventsData, next) {
eventsData.forEach(function(event) { eventsData.forEach(function(event) {
Object.keys(event).forEach(function(key) {
if (typeof event[key] === 'string') {
event[key] = validator.escape(String(event[key] || ''));
}
});
var e = utils.merge(event); var e = utils.merge(event);
e.eid = e.uid = e.type = e.ip = e.user = undefined; e.eid = e.uid = e.type = e.ip = e.user = undefined;
event.jsonString = JSON.stringify(e, null, 4); event.jsonString = JSON.stringify(e, null, 4);