fix: prevent discord mention exploit

2020-10-16 00:36:32 +13:00
parent 8f89f4b63f
commit 0776d33909
1 changed files with 4 additions and 0 deletions
--- a/app/imports/server/discord/sendWebhook.js
+++ b/app/imports/server/discord/sendWebhook.js
@@ -4,6 +4,10 @@ export default function sendWebhook({webhookURL, message, options}){
  let urlArray = webhookURL.split('/');
  let token = urlArray.pop();
  let id = urlArray.pop();
+  
+  // prevent discord mention exploit
+  options.allowedMentions = { parse: [] };
+  
  const hook = new Discord.WebhookClient(id, token);
  // Send a message using the webhook
  hook.send(message, options)