Prevent requestOptions.headers from being published to the client (in case it contains Authentication info)

This commit is contained in:
Erik Ziegler 2017-04-12 12:00:44 +02:00
parent cba6c6201c
commit bf97c3ebe2

View File

@ -3,6 +3,12 @@ import { OHIF } from 'meteor/ohif:core';
Meteor.publish('studyImportStatus', () => OHIF.studylist.collections.StudyImportStatus.find());
Meteor.publish('servers', () => Servers.find());
// When publishing Servers Collection, do not publish the requestOptions.headers
// field in case any authentication information is being passed
Meteor.publish('servers', () => Servers.find({}, {
fields: {
'requestOptions.headers': 0
}
}));
Meteor.publish('currentServer', () => CurrentServer.find());