external/MeshCentral
1
0
Fork 0
mirror of https://github.com/Ylianst/MeshCentral.git synced 2025-03-09 15:40:18 +00:00
Code Issues Releases Wiki Activity

Completed desktop multiplexor.

Browse source
This commit is contained in:
Ylian Saint-Hilaire 2020-04-28 12:42:58 -07:00
parent 87992cbcab
commit ccab8a43e9
3 changed files with 80 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

10
meshuser.js
View file

@ -1110,6 +1110,16 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
case 'msg':
{
// Before routing this command, let's do some security checking.
// If this is a tunnel request, we need to make sure the NodeID in the URL matches the NodeID in the command.
if (command.type == 'tunnel') {
if ((typeof command.value != 'string') || (typeof command.nodeid != 'string')) break;
var url = null;
try { url = require('url').parse(command.value, true); } catch (ex) { }
if (url == null) break; // Bad URL
if (url.query && url.query.nodeid && (url.query.nodeid != command.nodeid)) break; // Bad NodeID in URL query string
}
// Route this command to a target node
routeCommandToNode(command);
break;