blitzwing/cryptpad
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

guard against invalid channels, make session expiration time configurable

Browse source
This commit is contained in:
ansuz 2017-06-08 14:02:06 +02:00
parent aa296eadff
commit 5bd7e19ddd
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
rpc.js
View file

@ -16,9 +16,10 @@ var RPC = module.exports;
var Store = require("./storage/file");
var DEFAULT_LIMIT = 50 * 1024 * 1024;
var SESSION_EXPIRATION_TIME = 60 * 1000;
var isValidId = function (chan) {
return /^[a-fA-F0-9]/.test(chan) ||
return chan && chan.length && /^[a-fA-F0-9]/.test(chan) ||
[32, 48].indexOf(chan.length) !== -1;
};
@ -1058,7 +1059,7 @@ RPC.create = function (config /*:typeof(ConfigType)*/, cb /*:(?Error, ?Function)
// expire old sessions once per minute
setInterval(function () {
expireSessions(Sessions);
}, 60000);
}, SESSION_EXPIRATION_TIME);
});
});
});