The Comments plugin admin setting "Blocked author details" (comma-separated) is supposed to filter out author fields (e.g. email, id) from public comments API responses.
However, when saving the configuration, the entered value is not persisted into the expected field. In DevTools → Network, the save request payload shows:
- blockedAuthorProps: [""] (empty string in an array)
- while the entered value (e.g. email) ends up in a different field: blockedProps: "email"
As a result, public endpoints still return author.email.
Environment
- "@strapi/strapi": "5.33.1",
- "strapi-plugin-comments": "^3.1.2",