mirror of
https://github.com/ether/etherpad-lite.git
synced 2026-05-11 23:38:04 +02:00
- operator do not show up in the attribs of a pad, but authors could still leak to the pool
This commit is contained in:
parent
01cd82427a
commit
0693c0ae97
@ -659,8 +659,7 @@ function handleUserChanges(data, cb)
|
||||
|
||||
//+ can add text with attribs
|
||||
//= can change or add attribs
|
||||
//- can have attribs, but they are discarded and don't show up in the apool
|
||||
if(op.opcode == '-') continue;
|
||||
//- can have attribs, but they are discarded and don't show up in the attribs - but do show up in the pool
|
||||
|
||||
op.attribs.split('*').forEach(function(attr) {
|
||||
if(!attr) return
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user