fix: use server-trusted peerId in relay payload to prevent spoofing

2026-08-05 08:57:43 +00:00 · 2026-06-02 08:17:08 +02:00
parent 64f3c5eefd
commit d393aecde4
1 changed files with 1 additions and 1 deletions
@@ -503,7 +503,7 @@ io.on('connection', (socket) => {
                        mediaTitle:      clamp(data.mediaTitle, 100),
                        volume:          clampNum(data.volume, 0, 1),
                        muted:           validBool(data.muted),
-                        peerId:          typeof data.peerId === 'string' ? data.peerId.substring(0, 16) : undefined,
+                        peerId:          mapping.peerId,
                        status:          typeof data.status === 'string' ? data.status.substring(0, 16) : undefined,
                        expectedTitle:   clamp(data.expectedTitle, 100),
                        title:           clamp(data.title, 100),