User permission password showing on response data

[Boegie19]

@Chukwuemeka_Ifeora

If I do a query with populate, it shows fields marked as private.
Isn’t that a bad thing?

Yes you should always senatize everyting before putting it out you would have to senatize the input and the output