Merge pull request #6 from 1Code-JS/patch-1

fix: Email leakage in user profile page

Author: deadlyjack

client/pages/user/index.js

@@ -87,7 +87,9 @@ export default async function User({ userId }) {
             )}
           </div>
           <div className='socials' onclick={(e) => e.target.dataset.href && Router.loadUrl(e.target.dataset.href)}>
-            <button type='button' title='email' className='icon mail' data-href={`mailto:${user.email}`} />
+            {shouldShowSensitiveInfo && (
+              <button type='button' title='email' className='icon mail' data-href={`mailto:${user.email}`} />
+            )}
             {user.github && (
               <button type='button' title='go to github account' className='icon github' data-href={`https://github.com/${user.github}`} />
             )}