forked from I2P_Developers/i2p.i2p
I2CP: Enforce strict authorization when auth is enabled
This commit is contained in:
@@ -84,8 +84,8 @@ class ClientMessageEventListener implements I2CPMessageReader.I2CPMessageEventLi
|
|||||||
_log.debug("Message received: \n" + message);
|
_log.debug("Message received: \n" + message);
|
||||||
int type = message.getType();
|
int type = message.getType();
|
||||||
if (!_authorized) {
|
if (!_authorized) {
|
||||||
// TODO change to default true
|
// Default true as of 0.9.16
|
||||||
boolean strict = _context.getBooleanProperty(PROP_AUTH_STRICT);
|
boolean strict = _context.getBooleanPropertyDefaultTrue(PROP_AUTH_STRICT);
|
||||||
if ((strict && type != GetDateMessage.MESSAGE_TYPE) ||
|
if ((strict && type != GetDateMessage.MESSAGE_TYPE) ||
|
||||||
(type != CreateSessionMessage.MESSAGE_TYPE &&
|
(type != CreateSessionMessage.MESSAGE_TYPE &&
|
||||||
type != GetDateMessage.MESSAGE_TYPE &&
|
type != GetDateMessage.MESSAGE_TYPE &&
|
||||||
|
Reference in New Issue
Block a user