pad.libre-service.eu-etherpad/src/node
Richard Braakman 85b44119ae USERINFO_UPDATE: construct a new message for broadcast
The server was reusing the client's message when broadcasting userinfo
updates. This would allow a malicious client to insert arbitrary fields
into a message that the other clients would trust as coming from the
server. For example, adding "disconnect" or renaming other authors.

This commit fixes it by having the server construct a new message with
known fields before broadcasting.
2012-10-02 23:27:30 +03:00
..
db Fix async.forEach in MultiSession code 2012-09-19 17:48:26 +02:00
eejs Removed debug print 2012-04-20 15:08:50 +02:00
handler USERINFO_UPDATE: construct a new message for broadcast 2012-10-02 23:27:30 +03:00
hooks Don't shut down the whole server, if error handling middleware is called. 2012-10-02 20:11:18 +02:00
utils Merge pull request #994 from cweider/parent-plugins 2012-09-12 04:52:38 -07:00
easysync_tests.js replaceing AttributePoolFactory by AttributePool 2012-03-18 09:05:46 +01:00
padaccess.js The Big Renaming - etherpad is now an NPM module 2012-02-26 13:07:51 +01:00
README.md Merge branch 'pita' 2012-03-02 22:00:20 +01:00
server.js Split client and server plugin functionality. 2012-09-11 21:16:47 -07:00

About the folder structure

  • db - all modules that are accesing the data structure and are communicating directly to the database
  • handler - all modules that responds directly to requests/messages of the browser
  • utils - helper modules

Module name conventions

Module file names start with a capital letter and uses camelCase

Where does it start?

server.js is started directly