From dd1cfd62d49761ca257ffb0efa487aaf870352c7 Mon Sep 17 00:00:00 2001
From: psychobunny <rodrigues.andrew@gmail.com>
Date: Tue, 4 Jul 2017 23:46:49 -0400
Subject: [PATCH] don't show rss_token in /api/user/name

---
 src/user/data.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/user/data.js b/src/user/data.js
index 1342c4c657..3c79a9095f 100644
--- a/src/user/data.js
+++ b/src/user/data.js
@@ -122,6 +122,10 @@ module.exports = function (User) {
 				user.password = undefined;
 			}
 
+			if (user.rss_token) {
+				user.rss_token = undefined;
+			}
+
 			if (!parseInt(user.uid, 10)) {
 				user.uid = 0;
 				user.username = '[[global:guest]]';