gsadmin/KoalaSync
1
0
Fork 0
mirror of https://github.com/Shik3i/KoalaSync.git synced 2026-08-31 13:08:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: use server-trusted peerId in relay payload to prevent spoofing

Browse Source
This commit is contained in:
Koala
2026-06-02 08:17:08 +02:00
parent 64f3c5eefd
commit d393aecde4
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/index.js
+1 -1
View File
@@ -503,7 +503,7 @@ io.on('connection', (socket) => {
mediaTitle: clamp(data.mediaTitle, 100), mediaTitle: clamp(data.mediaTitle, 100),
volume: clampNum(data.volume, 0, 1), volume: clampNum(data.volume, 0, 1),
muted: validBool(data.muted), muted: validBool(data.muted),
peerId: typeof data.peerId === 'string' ? data.peerId.substring(0, 16) : undefined, peerId: mapping.peerId,
status: typeof data.status === 'string' ? data.status.substring(0, 16) : undefined, status: typeof data.status === 'string' ? data.status.substring(0, 16) : undefined,
expectedTitle: clamp(data.expectedTitle, 100), expectedTitle: clamp(data.expectedTitle, 100),
title: clamp(data.title, 100), title: clamp(data.title, 100),