Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ensure valid status is passed to error handler #622

Merged
merged 1 commit into from
Sep 13, 2019
Merged

ensure valid status is passed to error handler #622

merged 1 commit into from
Sep 13, 2019

Conversation

christopher-kiss
Copy link
Contributor

Note: the engine.io.js file is the generated output of make engine.io.js, and should not be manually modified.

The kind of change this PR does introduce

  • a bug fix
  • a new feature
  • an update to the documentation
  • a code change that improves performance
  • other

Current behaviour

Passed unvalidated status code into error handler which is pushed out to listeners.

New behaviour

Validates status code and if invalid returns 0 to signify an error in the response.

Other information (e.g. related issues)

Fixes #621

@darrachequesne darrachequesne merged commit fd7fff2 into socketio:master Sep 13, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Security risk in xhr.status if response is spoofed
2 participants