Remove sensitive fields from sanitize user in the admin

strapi · May 10, 2022 · 620418c · 620418c
1 parent b11623d
commit 620418c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/core/admin/server/services/user.js b/packages/core/admin/server/services/user.js
@@ -17,7 +17,7 @@ const sanitizeUserRoles = role => _.pick(role, ['id', 'name', 'description', 'co
  */
 const sanitizeUser = user => {
   return {
-    ..._.omit(user, ['password', 'resetPasswordToken', 'roles']),
+    ..._.omit(user, ['password', 'resetPasswordToken', 'registrationToken', 'roles']),
     roles: user.roles && user.roles.map(sanitizeUserRoles),
   };
 };