Prevent exposing too much information in the kcContext.realm of the single page account UI
This commit is contained in:
parent
fcdbb04ea6
commit
4ac14dc074
@ -208,6 +208,18 @@ function decodeHtmlEntities(htmlStr){
|
|||||||
) || (
|
) || (
|
||||||
key == "attributes" &&
|
key == "attributes" &&
|
||||||
areSamePath(path, ["realm"])
|
areSamePath(path, ["realm"])
|
||||||
|
) || (
|
||||||
|
xKeycloakify.pageId == "index.ftl" &&
|
||||||
|
xKeycloakify.themeType == "account" &&
|
||||||
|
areSamePath(path, ["realm"]) &&
|
||||||
|
![
|
||||||
|
"name",
|
||||||
|
"registrationEmailAsUsername",
|
||||||
|
"editUsernameAllowed",
|
||||||
|
"isInternationalizationEnabled",
|
||||||
|
"identityFederationEnabled",
|
||||||
|
"userManagedAccessAllowed"
|
||||||
|
]?seq_contains(key)
|
||||||
)
|
)
|
||||||
>
|
>
|
||||||
<#-- <#local outSeq += ["/*" + path?join(".") + "." + key + " excluded*/"]> -->
|
<#-- <#local outSeq += ["/*" + path?join(".") + "." + key + " excluded*/"]> -->
|
||||||
|
Loading…
x
Reference in New Issue
Block a user