Fixed user consent security issue.
Ylian Saint-Hilaire committed
Apr 15, 2020 at 12:36 UTC
9be8af9214a98dbb42241d95141cc7fbe4361bf3
2 files changed
+2
-2
agents/meshcore.js
+1
-1
@@ -1806,7 +1806,7 @@ function createMeshCore(agent) {
1806
ws.httprequest.xoptions = obj;
1807
1808
// Set additional user consent options if present
1809
- if ((obj != null) && (typeof obj.consent == 'number')) { ws.httprequest.consent += obj.consent; }
1809
+ if ((obj != null) && (typeof obj.consent == 'number')) { ws.httprequest.consent |= obj.consent; }
1810
1811
break;
1812
}
package.json
+1
-1
@@ -1,6 +1,6 @@
1
{
2
"name": "meshcentral",
3
- "version": "0.5.1-u",
3
+ "version": "0.5.1-v",
4
"keywords": [
5
"Remote Management",
6
"Intel AMT",