+router.post("/news", access.logged, access.ajax, (req,res) => {
+ if (params.devs.includes(req.userId)) {
+ const content = sanitizeHtml(req.body.news.content);
+ NewsModel.create(content, req.userId, (err, ret) => {
+ res.json(err || ret);
+ });
+ }
+});
+
+router.get("/news", access.ajax, (req,res) => {