From c408ffbb0fa524ba0ad69f0d9b5c707529fd66dc Mon Sep 17 00:00:00 2001
From: 1Code-JS <196545093+1Code-JS@users.noreply.github.com>
Date: Sat, 25 Oct 2025 12:42:01 +0200
Subject: [PATCH] fix: Email leakage in user profile page

---
 client/pages/user/index.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/client/pages/user/index.js b/client/pages/user/index.js
index 8c9577a..8e368aa 100644
--- a/client/pages/user/index.js
+++ b/client/pages/user/index.js
@@ -83,7 +83,9 @@ export default async function User({ userId }) {
               : ''}
           </div>
           <div className='socials' onclick={(e) => e.target.dataset.href && Router.loadUrl(e.target.dataset.href)}>
-            <button type='button' title='email' className='icon mail' data-href={`mailto:${user.email}`} />
+            {shouldShowSensitiveInfo && (
+              <button type='button' title='email' className='icon mail' data-href={`mailto:${user.email}`} />
+            )}
             {user.github && (
               <button type='button' title='go to github account' className='icon github' data-href={`https://github.com/${user.github}`} />
             )}