Fixes #37437 - Prevent XSS issue for pages using react and angular

theforeman · May 14, 2024 · 5b00e9e · 5b00e9e
1 parent 9b91cc9
commit 5b00e9e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/helpers/layout_helper.rb b/app/helpers/layout_helper.rb
@@ -40,7 +40,7 @@ def fetch_locations
   end
 
   def fetch_user
-    { current_user: User.current, user_dropdown: Menu::Manager.to_hash(:side_menu), impersonated_by: User.unscoped.find_by_id(session[:impersonated_by]) }
+    { current_user: User.current.as_json(only: [:id, :firstname, :lastname, :mail, :admin, :last_login_on, :name]), user_dropdown: Menu::Manager.to_hash(:side_menu), impersonated_by: User.unscoped.find_by_id(session[:impersonated_by]) }
   end
 
   def layout_data