From 6945628cf171c32a94bf732a714715300f8190bf Mon Sep 17 00:00:00 2001
From: yflory <yann.flory@xwiki.com>
Date: Wed, 18 Dec 2019 17:45:57 +0100
Subject: [PATCH] handle error in team outer

---
 www/common/outer/team.js | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/www/common/outer/team.js b/www/common/outer/team.js
index 09e2cb52d..7c67b22f6 100644
--- a/www/common/outer/team.js
+++ b/www/common/outer/team.js
@@ -1491,13 +1491,16 @@ define([
             // Accept the roster invitation: relplace our ephemeral keys with our user keys
             var rosterData = Util.find(inviteContent, ['teamData', 'keys', 'roster']);
             var myKeys = inviteContent.ephemeral;
+            if (!rosterData || !myKeys) {
+                waitFor.abort();
+                return void cb({error: 'INVALID_INVITE_CONTENT'});
+            }
             var rosterKeys = Crypto.Team.deriveMemberKeys(rosterData.edit, myKeys);
             Roster.create({
                 network: ctx.store.network,
                 channel: rosterData.channel,
                 keys: rosterKeys,
                 anon_rpc: ctx.store.anon_rpc,
-                lastKnownHash: rosterData.lastKnownHash, // XXX Can we trust this user?
             }, waitFor(function (err, roster) {
                 if (err) {
                     waitFor.abort();