Limit what label fields we expose on Dashboard::LabelsController#index

1 files changed, 3 insertions, 1 deletions

diff --git a/app/controllers/dashboard/labels_controller.rb b/app/controllers/dashboard/labels_controller.rb
index 05f7bc37952..d5031da867a 100644
--- a/app/controllers/dashboard/labels_controller.rb
+++ b/app/controllers/dashboard/labels_controller.rb
@@ -1,7 +1,9 @@
 class Dashboard::LabelsController < Dashboard::ApplicationController
   def index
+    labels = LabelsFinder.new(current_user).execute
+
     respond_to do |format|
-      format.json { render json: LabelsFinder.new(current_user).execute }
+      format.json { render json: labels.as_json(only: [:id, :title, :color]) }
     end
   end
 end