fix for #3246

10 years ago · f974af2247
parent 2deeda553a
commit f974af2247
1 changed files with 1 additions and 1 deletions
--- a/src/controllers/accounts.js
+++ b/src/controllers/accounts.js
@ -89,7 +89,7 @@ function getUserDataByUserSlug(userslug, callerUID, callback) {
 			userData.status = require('../socket.io').isUserOnline(userData.uid) ? (userData.status || 'online') : 'offline';
 			userData.banned = parseInt(userData.banned, 10) === 1;
 			userData.website = validator.escape(userData.website);
-			userData.websiteName = userData.website.replace('http://', '').replace('https://', '');
+			userData.websiteName = userData.website.replace(validator.escape('http://'), '').replace(validator.escape('https://'), '');
 			userData.followingCount = parseInt(userData.followingCount, 10) || 0;
 			userData.followerCount = parseInt(userData.followerCount, 10) || 0;