dylan.derr/Send
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fixed leaky app.state on the server-side. fixes #928

Browse source
This commit is contained in:
Danny Coates 2018-09-18 16:23:58 -07:00
parent 17a0393ce0
commit 99055b1342
No known key found for this signature in database
GPG key ID: 4C442633C62E00CB
4 changed files with 52 additions and 50 deletions
Download patch file Download diff file Expand all files Collapse all files

12
server/routes/pages.js
View file

@ -10,11 +10,11 @@ function stripEvents(str) {
module.exports = {
index: function(req, res) {
res.send(stripEvents(routes.toString('/', state(req))));
res.send(stripEvents(routes().toString('/', state(req))));
},
blank: function(req, res) {
res.send(stripEvents(routes.toString('/blank', state(req))));
res.send(stripEvents(routes().toString('/blank', state(req))));
},
download: async function(req, res, next) {
@ -24,7 +24,7 @@ module.exports = {
res.set('WWW-Authenticate', `send-v1 ${nonce}`);
res.send(
stripEvents(
routes.toString(
routes().toString(
`/download/${id}`,
Object.assign(state(req), {
downloadMetadata: { nonce, pwd }
@ -40,7 +40,7 @@ module.exports = {
unsupported: function(req, res) {
res.send(
stripEvents(
routes.toString(
routes().toString(
`/unsupported/${req.params.reason}`,
Object.assign(state(req), { fira: true })
)
@ -49,10 +49,10 @@ module.exports = {
},
legal: function(req, res) {
res.send(stripEvents(routes.toString('/legal', state(req))));
res.send(stripEvents(routes().toString('/legal', state(req))));
},
notfound: function(req, res) {
res.status(404).send(stripEvents(routes.toString('/404', state(req))));
res.status(404).send(stripEvents(routes().toString('/404', state(req))));
}
};