MirrorHub/synapse
0
0
Fork 1
mirror of https://mau.dev/maunium/synapse.git synced 2024-12-14 08:53:46 +01:00
Code Issues Projects Releases Wiki Activity

Fix SYWEB-110 : Prevent room ID leaking by looking for an m.room.name

Browse source
This commit is contained in:
Kegan Dougal 2014-10-27 17:05:05 +00:00
parent 4841b6d4ba
commit 4f6acf114c
1 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
webclient/components/matrix/event-handler-service.js
View file

@ -221,9 +221,19 @@ function(matrixService, $rootScope, $q, $timeout, mPresence) {
message = "* " + displayname + " " + message;
}
var roomTitle = matrixService.getRoomIdToAliasMapping(event.room_id);
var theRoom = $rootScope.events.rooms[event.room_id];
if (!roomTitle && theRoom && theRoom["m.room.name"] && theRoom["m.room.name"].content) {
roomTitle = theRoom["m.room.name"].content.name;
}
if (!roomTitle) {
roomTitle = event.room_id;
}
var notification = new window.Notification(
displayname +
" (" + (matrixService.getRoomIdToAliasMapping(event.room_id) || event.room_id) + ")", // FIXME: don't leak room_ids here
" (" + roomTitle + ")",
{
"body": message,
"icon": member ? member.avatar_url : undefined