github/PreMiD
1
1
Fork 0
mirror of https://github.com/PreMiD/PreMiD.git synced 2026-04-05 20:31:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #501 from PrivPreMiD/fix-all-origins-vuln

Browse Source 
[Stable/Urgent] Fix socketio server being able to be accessed by any website
This commit is contained in:
Fruxh
2020-09-29 01:19:06 +02:00
committed by GitHub
parent 9f43b3d9e1 8de108548c
commit a916982107
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/managers/socketManager.ts
View File

@@ -26,6 +26,10 @@ export function init() {
//* If someone connects to socket socketConnection
server = createServer();
io = socketIo(server, { serveClient: false });
io.origins((o, c) => {
if (o !== '*') c('Not a chrome extension, socket denied.', false);
c(null, true);
});
server.listen(3020, () => {
//* Resolve promise
//* Debug info