mirror of
				https://github.com/NodeBB/NodeBB.git
				synced 2025-10-31 02:55:58 +01:00 
			
		
		
		
	fix: #7125, allow list for page route, configurable via plugin hook
This commit is contained in:
		| @@ -249,12 +249,17 @@ module.exports = function (middleware) { | ||||
| 		res.status(403).render('403', { title: '[[global:403.title]]' }); | ||||
| 	}; | ||||
|  | ||||
| 	middleware.registrationComplete = function registrationComplete(req, res, next) { | ||||
| 	middleware.registrationComplete = async function registrationComplete(req, res, next) { | ||||
| 		// If the user's session contains registration data, redirect the user to complete registration | ||||
| 		if (!req.session.hasOwnProperty('registration')) { | ||||
| 			return setImmediate(next); | ||||
| 		} | ||||
| 		if (!req.path.endsWith('/register/complete')) { | ||||
|  | ||||
| 		const path = req.path.startsWith('/api/') ? req.path.replace('/api', '') : req.path; | ||||
| 		const { allowed } = await plugins.hooks.fire('filter:middleware.registrationComplete', { | ||||
| 			allowed: ['/register/complete'], | ||||
| 		}); | ||||
| 		if (!allowed.includes(path)) { | ||||
| 			// Append user data if present | ||||
| 			req.session.registration.uid = req.uid; | ||||
|  | ||||
|   | ||||
		Reference in New Issue
	
	Block a user