* [fix] don't expose _id,_rev,resource on safeJSON

chbm · Aug 29, 2012 · 1d3d5ba · 1d3d5ba
1 parent 4c9d0cb
commit 1d3d5ba
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/lib/resourceful/resource.js b/lib/resourceful/resource.js
@@ -870,8 +870,8 @@ Resource.prototype.toJSON = function () {
 Resource.prototype.safeJSON = function () {
   var schema = this.constructor.schema;
   return resourceful.clone(this.properties, function (key) {
-    return key === '_id' || key === '_rev' || key === 'resource'
-      || (schema.properties[key] && !schema.properties[key].restricted);
+    return !(key === '_id' || key === '_rev' || key === 'resource'
+      || (schema.properties[key] && schema.properties[key].restricted));
   });
 };
 

diff --git a/test/resourceful-test.js b/test/resourceful-test.js
@@ -126,6 +126,10 @@ vows.describe('resourceful').addVows({
 
         assert.ok(!restricted.title);
         assert.ok(restricted.kind);
+
+				assert.ok(!restricted._rev);
+				assert.ok(!restricted._id);
+				assert.ok(!restricted.resource);
       },
       "should return the attributes, when `Object.keys` is called": function (r) {
         var keys = Object.keys(r);