From 2766a4d01da76b1c311e787919bdd4bd346585ed Mon Sep 17 00:00:00 2001
From: David Taylor <david@taylorhq.com>
Date: Tue, 13 Aug 2019 11:13:41 +0100
Subject: [PATCH] FIX: Only serialize user custom fields specific to this
 plugin

---
 plugin.rb | 11 ++---------
 1 file changed, 2 insertions(+), 9 deletions(-)

diff --git a/plugin.rb b/plugin.rb
index 48dca3d..2092c82 100644
--- a/plugin.rb
+++ b/plugin.rb
@@ -19,6 +19,8 @@ after_initialize do
   User.register_custom_field_type('signature_raw', :text)
 
   register_editable_user_custom_field [:see_signatures, :signature_url, :signature_raw]
+  whitelist_public_user_custom_field :signature_cooked
+  whitelist_public_user_custom_field :signature_url
 
   add_to_serializer(:post, :user_signature) {
     if SiteSetting.signatures_advanced_mode then
@@ -28,15 +30,6 @@ after_initialize do
     end
   }
 
-  # I guess this should be the default @ discourse. PR maybe?
-  add_to_serializer(:user, :custom_fields) {
-    if object.custom_fields == nil then
-      {}
-    else
-      object.custom_fields
-    end
-  }
-
   # This is the code responsible for cooking a new advanced mode sig on user update
   DiscourseEvent.on(:user_updated) do |user|
     if SiteSetting.signatures_enabled? && SiteSetting.signatures_advanced_mode && user.custom_fields['signature_raw']