prevent ws group subscription if not specified in the valid format

This commit is contained in:
Ryan Petrello 2020-03-27 14:40:49 -04:00
parent 78db965797
commit 04dd1352c9
No known key found for this signature in database
GPG Key ID: F2AA5F2122351777

View File

@ -170,11 +170,9 @@ class EventConsumer(AsyncJsonWebsocketConsumer):
continue
new_groups.add(name)
else:
if group_name == settings.BROADCAST_WEBSOCKET_GROUP_NAME:
logger.warn("Non-priveleged client asked to join broadcast group!")
return
new_groups.add(group_name)
await self.send_json({"error": "access denied to channel"})
logger.error(f"groups must be a list, not {groups}")
return
old_groups = current_groups - new_groups
for group_name in old_groups: