From a5af87e47a521f296dbc65eb77765ebee14074a5 Mon Sep 17 00:00:00 2001 From: Girish Ramakrishnan Date: Wed, 31 Jan 2018 18:22:33 -0800 Subject: [PATCH] caas: never return key --- src/routes/domains.js | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/routes/domains.js b/src/routes/domains.js index d3f128d45..f9a33c1ba 100644 --- a/src/routes/domains.js +++ b/src/routes/domains.js @@ -46,6 +46,8 @@ function get(req, res, next) { if (error && error.reason === DomainError.NOT_FOUND) return next(new HttpError(404, error.message)); if (error) return next(new HttpError(500, error)); + delete result.fallbackCertificate.key; // do not return the 'key'. in caas, this is private + next(new HttpSuccess(200, result)); }); }