jschaufuss/DiceCloud
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #254 from JoeZwet/version-2

Browse Source 
fix: prevent discord mention exploit
This commit is contained in:
Stefan Zermatten
2020-10-15 13:48:30 +02:00
committed by GitHub
parent 8f89f4b63f 09371e7d54
commit 8a3d2474fc
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/imports/server/discord/sendWebhook.js
View File

@@ -4,6 +4,10 @@ export default function sendWebhook({webhookURL, message, options}){
let urlArray = webhookURL.split('/'); let urlArray = webhookURL.split('/');
let token = urlArray.pop(); let token = urlArray.pop();
let id = urlArray.pop(); let id = urlArray.pop();
// prevent discord mention exploit
options.disableMentions = 'all';
const hook = new Discord.WebhookClient(id, token); const hook = new Discord.WebhookClient(id, token);
// Send a message using the webhook // Send a message using the webhook
hook.send(message, options) hook.send(message, options)