swrup/geochan
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix user's data leak

Browse source
This commit is contained in:
Swrup 2022-02-07 21:09:39 +01:00
parent 3944ac7340
commit f7362629f1
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/user.ml
View file

@ -126,12 +126,12 @@ let list () =
let public_profile request =
let nick = Dream.param "user" request in
let^? nick, password, email, (bio, _) = Db.find_opt Q.get_user nick in
let^? nick, _password, _email, (bio, _) = Db.find_opt Q.get_user nick in
let user_info =
Format.sprintf
{|nick = `%s`; password = `%s`; email = `%s`; bio = '%s';
{|nick = `%s`; bio = '%s';
<img src="/user/%s/avatar" class="img-thumbnail" alt="Your avatar picture">|}
nick password email (Dream.html_escape bio) nick
nick (Dream.html_escape bio) nick
in
Ok user_info