From 878bfc7f46282dc69aa02a82d3e87862dc032967 Mon Sep 17 00:00:00 2001 From: Nick Gordon Date: Tue, 26 Nov 2013 06:48:18 -0800 Subject: [PATCH] removing sensitive user data from export --- src/controllers/dataexport.js | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/controllers/dataexport.js b/src/controllers/dataexport.js index 65a7554ab6..6e5f6703b2 100644 --- a/src/controllers/dataexport.js +++ b/src/controllers/dataexport.js @@ -31,7 +31,10 @@ dataexport.history = function(req, res) { } var userdata = function(user) { - //may eventually need to do some parsing here to eliminate/add from/to the object, just return user for now + if(user.auth && user.auth.local) { + delete user.auth.local.salt; + delete user.auth.local.hashed_password; + } return user; }