Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-01-23 07:53:00 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: backport socket.io vulnerability fix

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2023-01-11 16:40:54 -05:00
parent 49a9b5c9e8
commit 838d3da86d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/socket.io/index.js
View File

@@ -123,7 +123,7 @@ async function onMessage(socket, payload) {
const parts = eventName.toString().split('.');
const namespace = parts[0];
const methodToCall = parts.reduce((prev, cur) => {
if (prev !== null && prev[cur]) {
if (prev !== null && prev[cur] && (!prev.hasOwnProperty || prev.hasOwnProperty(cur))) {
return prev[cur];
}
return null;