jschaufuss/DiceCloud
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Removed single character subscription vulnerability

Browse Source
This commit is contained in:
Stefan Zermatten
2015-04-30 07:18:42 +02:00
parent 99a64667c6
commit aa069fd885
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
rpg-docs/server/publications/singleCharacter.js
View File

@@ -1,4 +1,5 @@
Meteor.publish("singleCharacter", function(characterId, userId){ Meteor.publish("singleCharacter", function(characterId){
userId = this.userId;
var char = Characters.findOne({ var char = Characters.findOne({
_id: characterId, _id: characterId,
$or: [ $or: [