All users emails are showing in the view source code mode
-
Nodebb 1.0.3
When I go into a thread logged in as normal user and select "view source code" from my browser and CTRL+F search for "email" I can see everyone's email addresses who have written in the thread.In the admin control panel I have selected "make user info private" and "show email" is disabled in the default user settings. "Show user email" is disabled also from user's personal settings.
I tried this here in Nodebb forums and I can't see people's email addresses.
Is this a database issue, ie. setting user privacy doesn't do anything or could it be related to Redactor composer plugin or... ?
What can I do?
-
Here is example of what I'm seeing in source code view:
-
Possibly same issue as https://community.nodebb.org/topic/8776/nodebb-email-exposure-bug-gravatar-plugin
-
The issue @baris mentions is supposed to be fixed within
nodebb-plugin-gravatar@2.0.3.
-
Thank you! That was it. Issue resolved.
Private Paste - Pastie
