From 95a0045a0db9a54f1d80173452a799e5c43e42ce Mon Sep 17 00:00:00 2001 From: Pavel Djundik Date: Wed, 16 Jan 2019 10:52:09 +0200 Subject: [PATCH] Add an extra check for setting names --- src/server.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/server.js b/src/server.js index e377f47b..df29503b 100644 --- a/src/server.js +++ b/src/server.js @@ -494,6 +494,10 @@ function initializeClient(socket, client, token, lastMessage) { return; } + if (typeof newSetting.name !== "string" || newSetting.name[0] === "_") { + return; + } + // Older user configs will not have the clientSettings property. if (!client.config.hasOwnProperty("clientSettings")) { client.config.clientSettings = {};