diff --git a/apps/web/lib/video/meeting-ended/[uid]/getServerSideProps.ts b/apps/web/lib/video/meeting-ended/[uid]/getServerSideProps.ts index 98112fe5b43693..c92439bdb3c7fb 100644 --- a/apps/web/lib/video/meeting-ended/[uid]/getServerSideProps.ts +++ b/apps/web/lib/video/meeting-ended/[uid]/getServerSideProps.ts @@ -23,10 +23,15 @@ export async function getServerSideProps(context: GetServerSidePropsContext) { return redirect; } - const bookingObj = Object.assign({}, booking, { - startTime: booking.startTime.toString(), - endTime: booking.endTime.toString(), - }); + // Booking Object DTO, we should not expose any sensitive data through getServerSideProps + server components + const bookingObj = Object.assign( + {}, + { + title: booking.title, + startTime: booking.startTime.toString(), + endTime: booking.endTime.toString(), + } + ); return { props: { diff --git a/packages/features/bookings/repositories/BookingRepository.ts b/packages/features/bookings/repositories/BookingRepository.ts index b78d568cd95e71..a2a9d5d52f4751 100644 --- a/packages/features/bookings/repositories/BookingRepository.ts +++ b/packages/features/bookings/repositories/BookingRepository.ts @@ -640,18 +640,6 @@ export class BookingRepository { select: { ...bookingMinimalSelect, uid: true, - user: { - select: { - credentials: true, - }, - }, - references: { - select: { - uid: true, - type: true, - meetingUrl: true, - }, - }, }, }); }