External/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-08-18 06:50:31 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(desktop): harden relay mesh connect p-tag (#834)

Browse Source
This commit is contained in:
tlongwell-block
2026-06-04 11:50:49 -04:00
committed by GitHub
parent b3aefae152
commit 34ac3ba1d1
18 changed files with 750 additions and 148 deletions
Download Patch File Download Diff File Expand all files Collapse all files
desktop/src/shared/api/relayMeshSignaling.ts
+13 -1
View File
@@ -23,6 +23,11 @@ export async function publishMeshStatusReport(
);
}
function normalizePubkey(value: string): string | null {
const trimmed = value.trim().toLowerCase();
return /^[0-9a-f]{64}$/.test(trimmed) ? trimmed : null;
}
export async function publishMeshConnectRequest(input: {
targetPubkey: string;
selfEndpointAddr: string;
@@ -40,10 +45,17 @@ export async function publishMeshConnectRequest(input: {
};
if (input.selfEndpointId) content.self_endpoint_id = input.selfEndpointId;
if (input.peerEndpointId) content.peer_endpoint_id = input.peerEndpointId;
const targetPubkey = normalizePubkey(input.targetPubkey);
if (!targetPubkey) {
throw new Error(
"Selected relay mesh target has an invalid reporter pubkey.",
);
}
const event = await signRelayEvent({
kind: KIND_MESH_CONNECT_REQUEST,
content: JSON.stringify(content),
tags: [["p", input.targetPubkey]],
tags: [["p", targetPubkey]],
});
await relayClient.publishEvent(
event,