infra
/
cryptpad
2
1
Fork 0
Code Issues Pull Requests Projects Releases 1 Activity

perform extra validation for private message rpc

pull/1/head
ansuz 2022-01-26 03:58:29 +05:30
parent 6e9fc243f0
commit d2852fdba4
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
lib/commands/channel.js
View File

@ -258,6 +258,11 @@ Channel.writePrivateMessage = function (Env, args, _cb, Server, netfluxId) {
return void cb('METADATA_ERR');
}
// treat the broadcast channel as write-protected
if (channelId.length === HK.ADMIN_CHANNEL_LENGTH) {
metadata.restricted = true;
}
if (!metadata || !metadata.restricted) {
return;
}
@ -265,10 +270,6 @@ Channel.writePrivateMessage = function (Env, args, _cb, Server, netfluxId) {
var session = HK.getNetfluxSession(Env, netfluxId);
var allowed = HK.listAllowedUsers(metadata);
// Special broadcast channel
if (channelId.length === HK.ADMIN_CHANNEL_LENGTH) {
allowed = Env.admins;
}
if (HK.isUserSessionAllowed(allowed, session)) { return; }