search

Flipez / hubot-rss-rolf

RSS Reader on Hubot
https://www.npmjs.org/package/hubot-rss-rolf
9 stars 4 forks source link

Doing hubot rss dump should not post dump form all rooms #17

Closed muppeth closed 4 years ago

muppeth commented 4 years ago

I run the bot for anyone to use upon request since the bot cant join rooms when invited. However I noticed that doing rss dump displays lists of all RSS feeds of all rooms the bot is in. This of course leaks the room addresses which are sometimes private.

EDIT: I thought HUBOT_RSS_DUMP_USERS should prevent anyone from doing dump. I'm using xmpp connector btw.

muppeth commented 4 years ago

Sorry my mistake. I was still running rss-reader instead.