escape on the way out, fixes birthday/age calculation

This commit is contained in:
barisusakli
2015-04-14 14:16:06 -04:00
parent eaa442db8c
commit f7a3aef322
2 changed files with 10 additions and 4 deletions

View File

@@ -89,10 +89,17 @@ function getUserDataByUserSlug(userslug, callerUID, callback) {
userData.profile_links = results.profile_links;
userData.status = require('../socket.io').isUserOnline(userData.uid) ? (userData.status || 'online') : 'offline';
userData.banned = parseInt(userData.banned, 10) === 1;
userData.websiteName = userData.website.replace(validator.escape('http://'), '').replace(validator.escape('https://'), '');
userData.websiteName = userData.website.replace('http://', '').replace('https://', '');
userData.followingCount = parseInt(userData.followingCount, 10) || 0;
userData.followerCount = parseInt(userData.followerCount, 10) || 0;
userData.username = validator.escape(userData.username);
userData.email = validator.escape(userData.email);
userData.fullname = validator.escape(userData.fullname);
userData.websiteName = validator.escape(userData.websiteName);
userData.location = validator.escape(userData.location);
userData.signature = validator.escape(userData.signature);
callback(null, userData);
});
});