• webv4/lib/events/nodelist.js

    From Rob Swindell@VERT to Git commit to sbbs/master on Monday, September 28, 2020 04:05:21
    https://gitlab.synchro.net/sbbs/sbbs/-/commit/b60c8cfc6c5b86b38c7b3242
    Modified Files:
    webv4/lib/events/nodelist.js
    Log Message:
    Anonymous nodes are now shown as "Anonymous" to non-sysops.

    Users that have put their terminal node into anonymous state (e.g.
    by using the ;anon command) should not have their identity exposed
    to non-sysops. This flaw was reported by altere in #synchronet.

    I'm not supporting translation of "Anonymous" here. We're not doing
    that for anonymously-posted messages either (yet), so I figured that
    was okay for now. There is a text.dat string for the word "Anonymous",
    it'd be nice if we just reused that, maybe.

    I also changed the node.status value magic number (3) to NODE_INUSE
    since we're loading nodedefs.js anyway, might as well.

    I'm not sure if it matters, but root/api/system.ssjs does not have
    this anonymous check either. I'm not sure where that code is used.

    ---
    Synchronet Vertrauen Home of Synchronet [vert/cvs/bbs].synchro.net