no need to leak the AgeBucket object IDs out in API responses #2670

globaldothealth · Apr 22, 2022 · f7edeb4 · f7edeb4
1 parent 864b0cd
commit f7edeb4
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/data-serving/data-service/src/controllers/case.ts b/data-serving/data-service/src/controllers/case.ts
@@ -74,6 +74,8 @@ const dtoFromCase = async (storedCase: LeanDocument<CaseDocument>) => {
                 }
             }
         }
+        // although the type system can't see it, there's an ageBuckets property on the demographics DTO now
+        delete (dto as unknown as { demographics: { ageBuckets?: [ObjectId] }}).demographics.ageBuckets;
     }
     delete dto.restrictedNotes;