libretic/etherpad-lite
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

- operator do not show up in the attribs of a pad, but authors could still leak to the pool

Browse source
This commit is contained in:
webzwo0i 2015-03-03 15:37:56 +01:00
parent 01cd82427a
commit 0693c0ae97
1 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/node/handler/PadMessageHandler.js
View file

@ -659,8 +659,7 @@ function handleUserChanges(data, cb)
//+ can add text with attribs //+ can add text with attribs
//= can change or add attribs //= can change or add attribs
//- can have attribs, but they are discarded and don't show up in the apool //- can have attribs, but they are discarded and don't show up in the attribs - but do show up in the pool
if(op.opcode == '-') continue;
op.attribs.split('*').forEach(function(attr) { op.attribs.split('*').forEach(function(attr) {
if(!attr) return if(!attr) return