Prevent rogue users from requesting multiple roomKeys

2023-01-22 17:43:54 +01:00 · 2023-01-22 17:43:54 +01:00 · 67273bc418
parent c9f57c6fa0
commit 67273bc418
1 changed files with 1 additions and 0 deletions
--- a/index.js
+++ b/index.js
@ -231,6 +231,7 @@ class PairDropServer {
    _onPairDeviceInitiate(sender) {
        let roomSecret = this.getRandomString(64);
        let roomKey = this._createRoomKey(sender, roomSecret);
+        if (sender.roomKey) this._removeRoomKey(sender.roomKey);
        sender.roomKey = roomKey;
        this._send(sender, {
            type: 'pair-device-initiated',