Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-31 02:55:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: tag whitelist check socket call for remote categories

Browse Source
This commit is contained in:
Julian Lam
2025-03-24 14:15:37 -04:00
parent 23b3148c84
commit c5901e0d24
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/socket.io/topics/tags.js
View File

@@ -9,13 +9,13 @@ const utils = require('../../utils');
module.exports = function (SocketTopics) { module.exports = function (SocketTopics) {
SocketTopics.isTagAllowed = async function (socket, data) { SocketTopics.isTagAllowed = async function (socket, data) {
if (!data || !utils.isNumber(data.cid) || !data.tag) { if (!data || !data.tag) {
throw new Error('[[error:invalid-data]]'); throw new Error('[[error:invalid-data]]');
} }
const systemTags = (meta.config.systemTags || '').split(','); const systemTags = (meta.config.systemTags || '').split(',');
const [tagWhitelist, isPrivileged] = await Promise.all([ const [tagWhitelist, isPrivileged] = await Promise.all([
categories.getTagWhitelist([data.cid]), utils.isNumber(data.cid) ? categories.getTagWhitelist([data.cid]) : [],
user.isPrivileged(socket.uid), user.isPrivileged(socket.uid),
]); ]);
return isPrivileged || return isPrivileged ||