Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 08:36:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: #7938, escape username in registration queue

Browse Source
This commit is contained in:
Baris Usakli
2019-10-03 11:30:09 -04:00
parent 603908c10a
commit d5dda26f97
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
src/user/approval.js
View File

@@ -110,6 +110,7 @@ module.exports = function (User) {
users = users.filter(Boolean).map(function (user, index) { users = users.filter(Boolean).map(function (user, index) {
user.timestampISO = utils.toISOString(data[index].score); user.timestampISO = utils.toISOString(data[index].score);
user.email = validator.escape(String(user.email)); user.email = validator.escape(String(user.email));
user.usernameEscaped = validator.escape(String(user.username));
delete user.hashedPassword; delete user.hashedPassword;
return user; return user;
}); });

2
src/views/admin/manage/registration.tpl
View File

@@ -25,7 +25,7 @@
</thead> </thead>
<tbody> <tbody>
<!-- BEGIN users --> <!-- BEGIN users -->
<tr data-username="{users.username}"> <tr data-username="{users.usernameEscaped}">
<td> <td>
<!-- IF users.usernameSpam --> <!-- IF users.usernameSpam -->
<i class="fa fa-times-circle text-danger" title="[[admin/manage/registration:list.username-spam, {users.spamData.username.frequency}, {users.spamData.username.appears}, {users.spamData.username.confidence}]]"></i> <i class="fa fa-times-circle text-danger" title="[[admin/manage/registration:list.username-spam, {users.spamData.username.frequency}, {users.spamData.username.appears}, {users.spamData.username.confidence}]]"></i>