escape users group data

10 years ago · f2c45e98da
parent c5b9c9254a
commit f2c45e98da
1 changed files with 3 additions and 2 deletions
--- a/src/controllers/accounts.js
+++ b/src/controllers/accounts.js
@ -256,12 +256,13 @@ accountsController.getGroups = function(req, res, next) {
 			return helpers.notFound(req, res);
 		}

-		groups.getUserGroups([userData.uid], function(err, groups) {
+		groups.getUserGroups([userData.uid], function(err, groupsData) {
 			if (err) {
 				return next(err);
 			}

-			userData.groups = groups[0];
+			userData.groups = groupsData[0];
+			userData.groups.forEach(groups.escapeGroupData);

 			res.render('account/groups', userData);
 		});