Merge pull request #254 from JoeZwet/version-2

fix: prevent discord mention exploit
2020-10-15 13:48:30 +02:00
parent 8f89f4b63f 09371e7d54
commit 8a3d2474fc
1 changed files with 4 additions and 0 deletions
--- a/app/imports/server/discord/sendWebhook.js
+++ b/app/imports/server/discord/sendWebhook.js
@@ -4,6 +4,10 @@ export default function sendWebhook({webhookURL, message, options}){
  let urlArray = webhookURL.split('/');
  let token = urlArray.pop();
  let id = urlArray.pop();
+  
+  // prevent discord mention exploit
+  options.disableMentions = 'all';
+  
  const hook = new Discord.WebhookClient(id, token);
  // Send a message using the webhook
  hook.send(message, options)