BREAKING CHANGES: (for SeCuRiTy):
By default: - `ssid_sessions[socket.ssid]` is now `session_data` - `require` is no longer allowed in user scripts To access global `socket_sessions` and `ssid_sessions`, as well as `require` additional modules, you must set `privileged: true` for the specific service. See `config.json`.
This commit is contained in:
@@ -6,7 +6,7 @@ var messageid = request_headers.query.message_id;
|
||||
var attachment_id = request_headers.query.attachment_id;
|
||||
if (!attachment_id && attachment_id != 0) errpage = wtvshared.doErrorPage(400, "Attachment ID required.");
|
||||
else {
|
||||
var message = ssid_sessions[socket.ssid].mailstore.getMessageByID(messageid);
|
||||
var message = session_data.mailstore.getMessageByID(messageid);
|
||||
if (!message) errpage = wtvshared.doErrorPage(400, "Invalid Message ID");
|
||||
else {
|
||||
if (!message.attachments) message.attachments = []; // backwards compat
|
||||
|
||||
Reference in New Issue
Block a user