Conversation
|
Sorry, i just didnt think about the group part... but does it works? it didnt recive img or msg for me... and add 2 ToDos^^ |
|
i am done... |
There was a problem hiding this comment.
file-content-tpe should be file-content-type on line 78
Also WARNING:
Uri tags can be spoofed, meaning that a user can pass a malicious url in as input and the client will automatically attempt to load the url.
This introduces several huge vulnerabilities to the API, I recommend that it not be accepted in its current form. Either whitelist URLs for automatic download such as *.kik.com, *.tenor.com, etc, or allow the user to pick what type of content will automatically be downloaded. app-name can also be maliciously changed, use the app-id attribute instead for figuring out what content type it is.
sorry but it was bothering me for ages, that it always returns undefined...
and now i starts getting into node_modules and pull requests ;)
so please dont judge me to hard^^