changed the privacyOptions to be a whitelist instead of a blacklist to avoid accidental leak of information.

This commit is contained in:
Niklas Ström 2014-09-08 13:44:49 +08:00
parent 7ea30d173d
commit 3b1b146bc7

View file

@ -1,13 +1,25 @@
privacyOptions = { // false means private privacyOptions = { // true means exposed
secret_id: false, _id: true,
isAdmin: false, commentCount: true,
emails: false, createdAt: true,
notifications: false, email_hash: true,
inviteCount: false, isInvited: true,
'profile.email': false, karma: true,
'services.twitter.accessToken': false, postCount: true,
'services.twitter.accessTokenSecret': false, slug: true,
'services.twitter.id': false, username: true,
'services.password': false, 'profile.name': true,
'services.resume': false 'profile.notifications': true,
}; 'profile.bio': true,
'profile.github': true,
'profile.site': true,
'profile.twitter': true,
'services.twitter.profile_image_url': true,
'services.facebook.id': true,
'services.twitter.screenName': true,
'services.github.screenName': true, // Github is not really used, but there are some mentions to it in the code
'votes.downvotedComments': true,
'votes.downvotedPosts': true,
'votes.upvotedComments': true,
'votes.upvotedPosts': true,
};