From aa069fd885bf096b38db496fea16c6d493a4fffc Mon Sep 17 00:00:00 2001 From: Stefan Zermatten Date: Thu, 30 Apr 2015 07:18:42 +0200 Subject: [PATCH] Removed single character subscription vulnerability --- rpg-docs/server/publications/singleCharacter.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/rpg-docs/server/publications/singleCharacter.js b/rpg-docs/server/publications/singleCharacter.js index 20360a3e..af1a7345 100644 --- a/rpg-docs/server/publications/singleCharacter.js +++ b/rpg-docs/server/publications/singleCharacter.js @@ -1,4 +1,5 @@ -Meteor.publish("singleCharacter", function(characterId, userId){ +Meteor.publish("singleCharacter", function(characterId){ + userId = this.userId; var char = Characters.findOne({ _id: characterId, $or: [