From 90b9bfa75f71f5043d44f17b26b5ef99ed043511 Mon Sep 17 00:00:00 2001 From: Akhil Narang Date: Tue, 22 Jul 2025 19:19:56 +0530 Subject: [PATCH] fix(user_profile): only allow updating these 4 fields Signed-off-by: Akhil Narang --- eps/eps/page/user_profile/user_profile.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/eps/eps/page/user_profile/user_profile.py b/eps/eps/page/user_profile/user_profile.py index 3013df5..f62ce6d 100644 --- a/eps/eps/page/user_profile/user_profile.py +++ b/eps/eps/page/user_profile/user_profile.py @@ -75,11 +75,11 @@ def get_user_rank(user): @frappe.whitelist() def update_profile_info(profile_info): profile_info = frappe.parse_json(profile_info) - keys = ["location", "interest", "user_image", "bio"] + keys = ("location", "interest", "user_image", "bio") - for key in keys: - if key not in profile_info: - profile_info[key] = None + for key in list(profile_info.keys()): + if key not in keys: + del profile_info[key] user = frappe.get_doc("User", frappe.session.user) user.update(profile_info)