Chapril/xmpp.chapril.org-conversejs
Chapril/xmpp.chapril.org-conversejs
24
0
Fork 0
Code Issues Pull Requests Projects Releases Activity

Attempt to mitigate against performance degrading attacks.

Browse Source
This commit is contained in:
JC Brand 2016-09-12 13:12:14 +02:00
parent 55aa98be0a
commit 600f98afcb
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
src/converse-chatview.js
View File

@ -139,11 +139,15 @@
this.$content.find('div.chat-event').remove();
},
showStatusNotification: function (message, keep_old) {
showStatusNotification: function (message, keep_old, permanent) {
if (!keep_old) {
this.clearStatusNotification();
}
this.$content.append($('<div class="chat-info chat-event"></div>').text(message));
var $el = $('<div class="chat-info"></div>').text(message);
if (!permanent) {
$el.addClass('chat-event');
}
this.$content.append($el);
this.scrollDown();
},
@ -292,6 +296,14 @@
// are mentioned.
extra_classes += ' mentioned';
}
if (text.length > 8000) {
text = text.substring(0, 10) + '...';
this.showStatusNotification(
__("A very large message has been received."+
"This might be due to an attack meant to degrade the chat performance."+
"Output has been shortened."),
true, true);
}
return $(template(
_.extend(this.getExtraMessageTemplateAttributes(attrs), {
'msgid': attrs.msgid,