Mirrors/overte
3
0
Fork 0
mirror of https://github.com/overte-org/overte.git synced 2025-08-09 20:23:06 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge pull request #8933 from huffman/fix/away-vulnerability

Browse source 
Fix away.js vulnerability
This commit is contained in:
Ryan Huffman 2016-10-27 11:55:36 -07:00 committed by GitHub
commit aa3af36933
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
scripts/system/away.js
View file

@ -304,7 +304,7 @@ function setEnabled(value) {
var CHANNEL_AWAY_ENABLE = "Hifi-Away-Enable"; var CHANNEL_AWAY_ENABLE = "Hifi-Away-Enable";
var handleMessage = function(channel, message, sender) { var handleMessage = function(channel, message, sender) {
if (channel === CHANNEL_AWAY_ENABLE) { if (channel === CHANNEL_AWAY_ENABLE && sender === MyAvatar.sessionUUID) {
print("away.js | Got message on Hifi-Away-Enable: ", message); print("away.js | Got message on Hifi-Away-Enable: ", message);
setEnabled(message === 'enable'); setEnabled(message === 'enable');
} }
@ -344,6 +344,7 @@ Script.scriptEnding.connect(function () {
Controller.mousePressEvent.disconnect(goActive); Controller.mousePressEvent.disconnect(goActive);
Controller.keyPressEvent.disconnect(maybeGoActive); Controller.keyPressEvent.disconnect(maybeGoActive);
Messages.messageReceived.disconnect(handleMessage); Messages.messageReceived.disconnect(handleMessage);
Messages.unsubscribe(CHANNEL_AWAY_ENABLE);
}); });
if (HMD.active && !HMD.mounted) { if (HMD.active && !HMD.mounted) {