Don't include user emails in lookup by id endpoint

regalijan · Oct 19, 2023 · a3f65a3 · a3f65a3
1 parent c187b68
commit a3f65a3
Showing 1 changed file with 11 additions and 3 deletions.
diff --git a/functions/api/mod-queue/[type]/[id].ts b/functions/api/mod-queue/[type]/[id].ts
@@ -33,10 +33,16 @@ export async function onRequestGet(context: RequestContext) {
       status: 403,
     });
 
-  let item = await context.env.DATA.get(`${types[type].prefix}${itemId}`);
+  let item: {
+    [k: string]: any;
+  } | null = await context.env.DATA.get(`${types[type].prefix}${itemId}`, {
+    type: "json",
+  });
 
   if (!item)
-    item = await context.env.DATA.get(`closed${types[type].prefix}${itemId}`);
+    item = await context.env.DATA.get(`closed${types[type].prefix}${itemId}`, {
+      type: "json",
+    });
 
   if (
     type === "report" &&
@@ -49,7 +55,9 @@ export async function onRequestGet(context: RequestContext) {
       status: 409,
     });
 
-  return new Response(item ? item : '{"error":"Not found"}', {
+  if (item) delete item.user?.email;
+
+  return new Response(item ? JSON.stringify(item) : '{"error":"Not found"}', {
     headers: {
       "content-type": "application/json",
     },