mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-10-29 18:16:17 +01:00
fix: #10805, hide unconfirmed emails from user data retrieval methods
This commit is contained in:
@@ -44,6 +44,11 @@ helpers.getUserDataByUserSlug = async function (userslug, callerUID, query = {})
|
||||
userData = await user.hidePrivateData(userData, callerUID);
|
||||
userData.emailClass = userSettings.showemail ? 'hide' : '';
|
||||
|
||||
// If email unconfirmed, hide from result set
|
||||
if (!userData['email:confirmed']) {
|
||||
userData.email = '';
|
||||
}
|
||||
|
||||
if (isAdmin || isSelf || (canViewInfo && !results.isTargetAdmin)) {
|
||||
userData.ips = results.ips;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user