From 193e03d2869bcf44a99dcf09dab15449b6c652b3 Mon Sep 17 00:00:00 2001
From: Naomi Carrigan <nhcarrigan@gmail.com>
Date: Thu, 19 Jan 2023 05:16:17 -0800
Subject: [PATCH] feat: restrict update flag endpoint (#46314)

Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
Co-authored-by: Sem Bauke <semboot699@gmail.com>
---
 api-server/src/server/boot/settings.js | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/api-server/src/server/boot/settings.js b/api-server/src/server/boot/settings.js
index d1a4b4006cf..e93f32dff83 100644
--- a/api-server/src/server/boot/settings.js
+++ b/api-server/src/server/boot/settings.js
@@ -281,12 +281,6 @@ function handleInvalidUpdate(res) {
 function updateUserFlag(req, res, next) {
   const { user, body: update } = req;
   const allowedKeys = [
-    'theme',
-    'sound',
-    'keyboardShortcuts',
-    'isHonest',
-    'portfolio',
-    'sendQuincyEmail',
     'isGithub',
     'isLinkedIn',
     'isTwitter',