Chapril/xmpp.chapril.org-conversejs
Chapril/xmpp.chapril.org-conversejs
24
0
Fork 0
Code Issues Pull Requests Projects Releases Activity

Bugfix. Prevent bypassing of password form via bookmark form

Browse Source 
Not a security hole, but a UX issue.

Also... don't render artifacts before rendering the nickname form.
This commit is contained in:
JC Brand 2017-04-04 14:45:50 +00:00
parent 2f8fac03ff
commit d0f9f15d60
1 changed files with 22 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
src/converse-muc.js
View File

@ -99,8 +99,9 @@
CONNECTED: 0,
CONNECTING: 1,
NICKNAME_REQUIRED: 2,
DISCONNECTED: 3,
ENTERED: 4
PASSWORD_REQUIRED: 3,
DISCONNECTED: 4,
ENTERED: 5
};
converse.plugins.add('converse-muc', {
@ -385,10 +386,13 @@
},
render: function () {
this.$el.attr('id', this.model.get('box_id'))
.html(tpl_chatroom());
this.el.setAttribute('id', this.model.get('box_id'));
this.el.innerHTML = tpl_chatroom();
this.renderHeading();
this.renderChatArea();
if (this.model.get('connection_status') !== ROOMSTATUS.ENTERED) {
this.showSpinner();
}
utils.refreshWebkit();
return this;
},
@ -1574,6 +1578,7 @@
label_password: __('Password: '),
label_submit: __('Submit')
}));
this.model.save('connection_status', ROOMSTATUS.PASSWORD_REQUIRED);
this.$('.chatroom-form').on('submit', this.submitPassword.bind(this));
},
@ -1783,11 +1788,6 @@
}
},
showSpinner: function () {
this.$('.chatroom-body').children().addClass('hidden');
this.$el.find('.chatroom-body').prepend('<span class="spinner centered"/>');
},
renderAfterTransition: function () {
/* Rerender the room after some kind of transition. For
* example after the spinner has been removed or after a
@ -1795,6 +1795,8 @@
*/
if (this.model.get('connection_status') == ROOMSTATUS.NICKNAME_REQUIRED) {
this.renderNicknameForm();
} else if (this.model.get('connection_status') == ROOMSTATUS.PASSWORD_REQUIRED) {
this.renderPasswordForm();
} else {
this.$el.find('.chat-area').removeClass('hidden');
this.$el.find('.occupants').removeClass('hidden');
@ -1803,6 +1805,11 @@
}
},
showSpinner: function () {
this.$('.chatroom-body').children().addClass('hidden');
this.$el.find('.chatroom-body').prepend('<span class="spinner centered"/>');
},
hideSpinner: function () {
/* Check if the spinner is being shown and if so, hide it.
* Also make sure then that the chat area and occupants
@ -1853,6 +1860,7 @@
}
}
this.model.save('connection_status', ROOMSTATUS.ENTERED);
this.hideSpinner();
}
if (!locked_room && !this.model.get('features_fetched') &&
this.model.get('connection_status') !== ROOMSTATUS.CONNECTED) {
@ -2002,12 +2010,11 @@
},
render: function () {
this.$el.html(
tpl_chatroom_sidebar(
_.extend(this.chatroomview.model.toJSON(), {
'allow_muc_invitations': _converse.allow_muc_invitations,
'label_occupants': __('Occupants')
}))
this.el.innerHTML = tpl_chatroom_sidebar(
_.extend(this.chatroomview.model.toJSON(), {
'allow_muc_invitations': _converse.allow_muc_invitations,
'label_occupants': __('Occupants')
})
);
if (_converse.allow_muc_invitations) {
_converse.api.waitUntil('rosterContactsFetched').then(