fix: hide sensitive email change fields in team member responses
This commit is contained in:
parent
9d1369e7f8
commit
844a67a006
1 changed files with 4 additions and 0 deletions
|
|
@ -179,6 +179,8 @@ public function members_by_id(Request $request)
|
|||
$members = $team->members;
|
||||
$members->makeHidden([
|
||||
'pivot',
|
||||
'email_change_code',
|
||||
'email_change_code_expires_at',
|
||||
]);
|
||||
|
||||
return response()->json(
|
||||
|
|
@ -264,6 +266,8 @@ public function current_team_members(Request $request)
|
|||
$team = auth()->user()->currentTeam();
|
||||
$team->members->makeHidden([
|
||||
'pivot',
|
||||
'email_change_code',
|
||||
'email_change_code_expires_at',
|
||||
]);
|
||||
|
||||
return response()->json(
|
||||
|
|
|
|||
Loading…
Reference in a new issue