Spacebar/server
1
0
Fork 0
mirror of https://github.com/spacebarchat/server.git synced 2024-09-21 18:21:36 +02:00
Code Issues Releases Activity

🔒 fix exposing user in channel.recipients

Browse Source
This commit is contained in:
Flam3rboy 2021-08-08 00:27:23 +02:00
parent 762255aad0
commit c73cab2d03
2 changed files with 4 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/models/Channel.ts
View File

@ -1,7 +1,7 @@
import { Schema, model, Types, Document } from "mongoose";
import db from "../util/Database";
import toBigInt from "../util/toBigInt";
import { UserModel } from "./User";
import { PublicUserProjection, UserModel } from "./User";
// @ts-ignore
export interface AnyChannel extends Channel, DMChannel, TextChannel, VoiceChannel {
@ -42,7 +42,7 @@ ChannelSchema.virtual("recipients", {
localField: "recipient_ids",
foreignField: "id",
justOne: false,
autopopulate: true,
autopopulate: { select: PublicUserProjection },
});
ChannelSchema.set("removeResponse", ["recipient_ids"]);

10
src/models/Invite.ts
View File

@ -1,7 +1,7 @@
import { Schema, Document, Types } from "mongoose";
import db from "../util/Database";
import { ChannelModel } from "./Channel";
import { UserModel } from "./User";
import { PublicUserProjection, UserModel } from "./User";
import { GuildModel } from "./Guild";
export interface Invite {
@ -60,13 +60,7 @@ InviteSchema.virtual("inviter", {
foreignField: "id",
justOne: true,
autopopulate: {
select: {
id: true,
username: true,
avatar: true,
discriminater: true,
public_flags: true,
},
select: PublicUserProjection,
},
});