diff options
| author | webzwo0i <webzwo0i@c3d2.de> | 2015-03-03 15:37:56 +0100 |
|---|---|---|
| committer | webzwo0i <webzwo0i@c3d2.de> | 2015-03-03 15:37:56 +0100 |
| commit | 0693c0ae970627583f435a0e8a70ab4639b9a2f8 (patch) | |
| tree | 7828966cebe1068e403373c36e239df0b1a769ff /src/node/handler/PadMessageHandler.js | |
| parent | 01cd82427a4e83e656f084923f8f06a1a61582c9 (diff) | |
| download | etherpad-lite-0693c0ae970627583f435a0e8a70ab4639b9a2f8.zip | |
- operator do not show up in the attribs of a pad, but authors could still leak to the pool
Diffstat (limited to 'src/node/handler/PadMessageHandler.js')
| -rw-r--r-- | src/node/handler/PadMessageHandler.js | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/src/node/handler/PadMessageHandler.js b/src/node/handler/PadMessageHandler.js index 7521c05c..ab81ad87 100644 --- a/src/node/handler/PadMessageHandler.js +++ b/src/node/handler/PadMessageHandler.js @@ -659,8 +659,7 @@ function handleUserChanges(data, cb) //+ can add text with attribs //= can change or add attribs - //- can have attribs, but they are discarded and don't show up in the apool - if(op.opcode == '-') continue; + //- can have attribs, but they are discarded and don't show up in the attribs - but do show up in the pool op.attribs.split('*').forEach(function(attr) { if(!attr) return |