diff --git a/src/constants/blacklistConfig.js b/src/constants/blacklistConfig.js index 0830cf6b9..f6e21fc1f 100644 --- a/src/constants/blacklistConfig.js +++ b/src/constants/blacklistConfig.js @@ -84,7 +84,6 @@ const account = { registrationOtp: [ 'id', 'email_verified', - 'name', 'gender', 'location', 'about', diff --git a/src/validators/v1/organization.js b/src/validators/v1/organization.js index 58651f2f2..9a0bcf838 100644 --- a/src/validators/v1/organization.js +++ b/src/validators/v1/organization.js @@ -21,6 +21,7 @@ module.exports = { .trim() .notEmpty() .withMessage('description field is empty') + .not() .matches(/(\b)(on\S+)(\s*)=|javascript:|<(|\/|[^\/>][^>]+|\/[^>][^>]+)>/gi) .withMessage('invalid description') req.checkBody('domains').trim().notEmpty().withMessage('domains field is empty') @@ -42,6 +43,7 @@ module.exports = { .trim() .notEmpty() .withMessage('description field is empty') + .not() .matches(/(\b)(on\S+)(\s*)=|javascript:|<(|\/|[^\/>][^>]+|\/[^>][^>]+)>/gi) .withMessage('invalid description') }, diff --git a/src/validators/v1/user.js b/src/validators/v1/user.js index 40feb3f7e..a0ceb2c2f 100644 --- a/src/validators/v1/user.js +++ b/src/validators/v1/user.js @@ -38,6 +38,7 @@ module.exports = { .trim() .notEmpty() .withMessage('about field is empty') + .not() .matches(/(\b)(on\S+)(\s*)=|javascript:|<(|\/|[^\/>][^>]+|\/[^>][^>]+)>/gi) .withMessage('invalid about')