[mirotalksfu] - add catch on check XSS
هذا الالتزام موجود في:
@@ -453,7 +453,7 @@ function startServer() {
|
||||
if (config.ngrok.authToken !== '') {
|
||||
return ngrokStart();
|
||||
}
|
||||
log.debug('Settings', {
|
||||
log.info('Settings', {
|
||||
node_version: process.versions.node,
|
||||
hostConfig: hostCfg,
|
||||
announced_ip: announcedIP,
|
||||
|
||||
@@ -5,12 +5,17 @@ const Logger = require('./Logger');
|
||||
const log = new Logger('Xss');
|
||||
|
||||
const checkXSS = (dataObject) => {
|
||||
if (typeof dataObject === 'object' && Object.keys(dataObject).length > 0) {
|
||||
const data = xss(JSON.stringify(dataObject));
|
||||
log.debug('Sanitization done');
|
||||
return JSON.parse(data);
|
||||
try {
|
||||
if (typeof dataObject === 'object' && Object.keys(dataObject).length > 0) {
|
||||
const data = xss(JSON.stringify(dataObject));
|
||||
log.debug('Check XSS done');
|
||||
return JSON.parse(data);
|
||||
}
|
||||
return xss(dataObject);
|
||||
} catch (error) {
|
||||
log.error('Check XSS error', { error: error, data: dataObject });
|
||||
return dataObject;
|
||||
}
|
||||
return xss(dataObject);
|
||||
};
|
||||
|
||||
module.exports = checkXSS;
|
||||
|
||||
المرجع في مشكلة جديدة
حظر مستخدم