Prevent exposing too much information in the kcContext.realm of the single page account UI

This commit is contained in:
Joseph Garrone 2024-07-28 20:01:11 +02:00
parent fcdbb04ea6
commit 4ac14dc074

View File

@ -208,6 +208,18 @@ function decodeHtmlEntities(htmlStr){
) || ( ) || (
key == "attributes" && key == "attributes" &&
areSamePath(path, ["realm"]) areSamePath(path, ["realm"])
) || (
xKeycloakify.pageId == "index.ftl" &&
xKeycloakify.themeType == "account" &&
areSamePath(path, ["realm"]) &&
![
"name",
"registrationEmailAsUsername",
"editUsernameAllowed",
"isInternationalizationEnabled",
"identityFederationEnabled",
"userManagedAccessAllowed"
]?seq_contains(key)
) )
> >
<#-- <#local outSeq += ["/*" + path?join(".") + "." + key + " excluded*/"]> --> <#-- <#local outSeq += ["/*" + path?join(".") + "." + key + " excluded*/"]> -->