Fix #4012, removing potentially sensitive information on title update

mozilla-services · Jun 9, 2018 · f4b4c01 · f4b4c01
1 parent 58e1068
commit f4b4c01
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/server/src/server.js b/server/src/server.js
@@ -807,6 +807,9 @@ app.post("/api/set-title/:id/:domain", function(req, res) {
       return null;
     }
     shot.userTitle = userTitle;
+    if (shot.openGraph && shot.openGraph.title) {
+        shot.openGraph.title = userTitle;
+    }
     return shot.update();
   }).then((updated) => {
     simpleResponse(res, "Updated", 200);