BREAKING CHANGES: (for SeCuRiTy):
By default: - `ssid_sessions[socket.ssid]` is now `session_data` - `require` is no longer allowed in user scripts To access global `socket_sessions` and `ssid_sessions`, as well as `require` additional modules, you must set `privileged: true` for the specific service. See `config.json`.
This commit is contained in:
@@ -5,10 +5,10 @@ var errpage = null;
|
||||
var messageid = request_headers.query.message_id || null;
|
||||
if (!messageid) {
|
||||
// get user signature
|
||||
data = ssid_sessions[socket.ssid].getSessionData("subscriber_signature");
|
||||
data = session_data.getSessionData("subscriber_signature");
|
||||
} else {
|
||||
// get message signature
|
||||
var message = ssid_sessions[socket.ssid].mailstore.getMessageByID(messageid);
|
||||
var message = session_data.mailstore.getMessageByID(messageid);
|
||||
if (!message) errpage = wtvshared.doErrorPage(400, "Invalid Message ID");
|
||||
data = message.signature
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user