mirror of
				https://github.com/NodeBB/NodeBB.git
				synced 2025-10-30 18:46:01 +01:00 
			
		
		
		
	fix: #10805, hide unconfirmed emails from user data retrieval methods
This commit is contained in:
		| @@ -44,6 +44,11 @@ helpers.getUserDataByUserSlug = async function (userslug, callerUID, query = {}) | ||||
| 	userData = await user.hidePrivateData(userData, callerUID); | ||||
| 	userData.emailClass = userSettings.showemail ? 'hide' : ''; | ||||
|  | ||||
| 	// If email unconfirmed, hide from result set | ||||
| 	if (!userData['email:confirmed']) { | ||||
| 		userData.email = ''; | ||||
| 	} | ||||
|  | ||||
| 	if (isAdmin || isSelf || (canViewInfo && !results.isTargetAdmin)) { | ||||
| 		userData.ips = results.ips; | ||||
| 	} | ||||
|   | ||||
		Reference in New Issue
	
	Block a user