mirror of
https://github.com/jech/galene.git
synced 2024-11-22 08:35:57 +01:00
Protect against chat message spoofing.
This commit is contained in:
parent
f9e0573654
commit
74b3683cf1
1 changed files with 7 additions and 0 deletions
|
@ -1069,6 +1069,13 @@ func handleClientMessage(c *webClient, m clientMessage) error {
|
|||
log.Printf("ICE: %v", err)
|
||||
}
|
||||
case "chat", "usermessage":
|
||||
if m.Id != c.id {
|
||||
return group.UserError("wrong sender id")
|
||||
}
|
||||
if m.Username != "" && m.Username != c.username {
|
||||
return group.UserError("wrong sender username")
|
||||
}
|
||||
|
||||
tm := group.ToJSTime(time.Now())
|
||||
if m.Type == "chat" {
|
||||
if m.Dest == "" {
|
||||
|
|
Loading…
Reference in a new issue