rainbownapkin/fore.st
1
0
Fork 0
Code Issues 13 Pull requests Projects Releases Packages Wiki Activity Actions

Fix a vulnerability in chatMsg handler

Browse source
This commit is contained in:
calzoneman 2013-10-12 18:25:36 -05:00
parent babeb01ebe
commit 51d89b99e8
2 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
lib/user.js
View file

@ -229,6 +229,13 @@ User.prototype.initCallbacks = function () {
self.socket.on("chatMsg", function (data) {
if (self.inChannel()) {
if (typeof data.msg !== "string") {
self.socket.emit("kick", {
reason: "Invalid chatMsg packet!"
});
self.socket.disconnect(true);
return;
}
if (data.msg.indexOf("/afk") !== 0) {
self.setAFK(false);
self.autoAFK();