From 3be7f3c774ae142c0da1e7050e559999d6df26c1 Mon Sep 17 00:00:00 2001
From: Ylian Saint-Hilaire <ysainthilaire@hotmail.com>
Date: Wed, 15 Apr 2020 12:36:22 -0700
Subject: [PATCH] Fixed user consent security issue.

---
 agents/meshcore.js | 2 +-
 package.json       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/agents/meshcore.js b/agents/meshcore.js
index 82ee7667..f6ca75b8 100644
--- a/agents/meshcore.js
+++ b/agents/meshcore.js
@@ -1806,7 +1806,7 @@ function createMeshCore(agent) {
                 ws.httprequest.xoptions = obj;
 
                 // Set additional user consent options if present
-                if ((obj != null) && (typeof obj.consent == 'number')) { ws.httprequest.consent += obj.consent; }
+                if ((obj != null) && (typeof obj.consent == 'number')) { ws.httprequest.consent |= obj.consent; }
 
                 break;
             }
diff --git a/package.json b/package.json
index 3979ebb5..3d8ab5f2 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "meshcentral",
-  "version": "0.5.1-u",
+  "version": "0.5.1-v",
   "keywords": [
     "Remote Management",
     "Intel AMT",