From f2c45e98da4dc2fbd7e7150791d794e3a4776ecc Mon Sep 17 00:00:00 2001
From: barisusakli <barisusakli@gmail.com>
Date: Tue, 30 Jun 2015 15:25:25 -0400
Subject: [PATCH] escape users group data

---
 src/controllers/accounts.js | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/controllers/accounts.js b/src/controllers/accounts.js
index 92ae47250f..3fdb810c83 100644
--- a/src/controllers/accounts.js
+++ b/src/controllers/accounts.js
@@ -256,12 +256,13 @@ accountsController.getGroups = function(req, res, next) {
 			return helpers.notFound(req, res);
 		}
 
-		groups.getUserGroups([userData.uid], function(err, groups) {
+		groups.getUserGroups([userData.uid], function(err, groupsData) {
 			if (err) {
 				return next(err);
 			}
 
-			userData.groups = groups[0];
+			userData.groups = groupsData[0];
+			userData.groups.forEach(groups.escapeGroupData);
 
 			res.render('account/groups', userData);
 		});