external/MeshCentral
1
0
Fork 0
mirror of https://github.com/Ylianst/MeshCentral.git synced 2025-03-09 15:40:18 +00:00
Code Issues Releases Wiki Activity

Fixed cross-domain event leakage.

Browse source
This commit is contained in:
Ylian Saint-Hilaire 2020-04-20 13:11:34 -07:00
parent b129740f28
commit 9c7aeaef21
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
meshuser.js
View file

@ -268,7 +268,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// Handle events
ws.HandleEvent = function (source, event, ids, id) {
if (!event.domain || event.domain == domain.id) {
if ((event.domain == null) || (event.domain == domain.id)) {
try {
if (event == 'close') { try { delete req.session; } catch (ex) { } obj.close(); }
else if (event == 'resubscribe') { user.subscriptions = parent.subscribe(user._id, ws); }