games/unibutton
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sanitize packets

Browse source
This commit is contained in:
biglyderv 2024-11-25 14:14:20 -05:00
parent 13cd3db387
commit 4f4328e163
2 changed files with 12 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

13
index.js
View file

@ -38,11 +38,20 @@ app.ws('/', function (ws, req) {
let newEnt = game.entities[playerI];
let {you} = newEnt;
let { you } = newEnt;
let props = player.legalProps;
for (let i in props) {
let prop = data[i];
let typed = (typeof prop);
let keys = Object.keys(prop);
let isC = (typed === 'object' && keys[0] == 'x' && keys[1] == 'y' && keys.length == 2 && typeof prop.x == 'number' && typeof prop.y == 'number');
if (typed !== 'string' && typed !== 'number' && typed !== 'boolean' && typed !== 'undefined' && !isC) {
console.warn(`Player ${you} attempted to send an invalid packet ${props[i]}`)
continue;
}
newEnt[props[i]] = data[i];
}
@ -51,7 +60,7 @@ app.ws('/', function (ws, req) {
if (you != you2) {
console.log(`Player ${you} now identifies as ${you2}`);
}
if (newEnt.ref) {
console.log(`Player ${you2} discovered this game from ${newEnt.ref}`);
newEnt.ref = undefined;