Drift/delete-your-element
1
1
Fork 0
Code Issues 1 Pull Requests Releases Activity

Fix retrying own events as non-moderator

Browse Source
This commit is contained in:
Cadence Ember
2026-01-25 13:50:16 +13:00
parent c0bbdfde60
commit 2496f4c3b0
3 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/m2d/event-dispatcher.js
View File

@@ -173,7 +173,7 @@ async function onRetryReactionAdd(reactionEvent) {
if (event.sender !== `@${reg.sender_localpart}:${reg.ooye.server_name}` || !error) return
// To stop people injecting misleading messages, the reaction needs to come from either the original sender or a room moderator
if (reactionEvent.sender !== event.sender) {
if (reactionEvent.sender !== error.payload.sender) {
// Check if it's a room moderator
const {powers: {[reactionEvent.sender]: senderPower}, powerLevels} = await utils.getEffectivePower(roomID, [reactionEvent.sender], api)
if (senderPower < (powerLevels.state_default ?? 50)) return