Commit 3d9e4780 authored by JC Brand's avatar JC Brand

Fixes #749

parent 545df772
......@@ -2,6 +2,7 @@
## 2.0.6 (Unreleased)
- #486 Honor existing mam user configuration [throwaway42]
- #749 /me will show your contact's name in the sent field [jcbrand]
- Escape user-generated input to prevent JS-injection attacks. (Thanks to SamWhited) [jcbrand]
## 2.0.5 (2017-02-01)
......
......@@ -316,7 +316,8 @@
if ((match) && (match[1] === 'me')) {
text = text.replace(/^\/me/, '');
template = converse.templates.action;
username = fullname;
fullname = converse.xmppstatus.get('fullname');
username = !fullname ? converse.bare_jid: fullname;
} else {
template = converse.templates.message;
username = attrs.sender === 'me' && __('me') || fullname;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment