echo/echoIRCd
1
1
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

harden: connclass clone-cap at register, ws control-frame limits, uuid recycle-skip, json-escape extjwt/filehost claims, metadata value/key caps, cloak numeric-dotted leak, relaymsg remote-nick, rpc set_oper block validation, isupport 13-token split, multi-hop privmsg routing, connectdelay=0

Browse source
This commit is contained in:
Jean Chevronnet 2026-08-15 16:27:11 +00:00
parent e935ee7002
commit 35af95fd0f
11 changed files with 129 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

12
src/modules/rpc/user.rs
View file

@ -134,7 +134,17 @@ pub fn handle(s: &mut Server, action: &str, params: &str) -> Result<String, RpcE
let uid = resolve(s, params).ok_or_else(|| RpcError::not_found("no such user"))?;
let oper = json::get_str(params, "oper").or_else(|| json::get_str(params, "type"));
match oper {
Some(name) if !name.is_empty() => s.oper_up(uid),
Some(name) if !name.is_empty() => {
// apply the named oper block's level; reject an unknown name rather
// than silently opering with defaults
match s.opers.iter().find(|o| o.0 == name).map(|o| o.2) {
Some(level) => {
s.oper_up(uid);
crate::modules::operlevels::set(s, uid, level);
}
None => return Err(RpcError::invalid_params("no such oper block")),
}
}
_ => svs_set_user_modes(s, uid, "-o"), // de-oper
}
Ok(obj(&[("result", "true".into())]))