BUG: Incorrect code being signed

OWASP · Sep 15, 2023 · 5ff0cf5 · 5ff0cf5
1 parent 99331b8
commit 5ff0cf5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/hackerden/front/chat-api.js b/hackerden/front/chat-api.js
@@ -75,10 +75,10 @@ getCurrentUser = async(req, resp) => {
 
   if(user.permissions && user.permissions.length > 0 && user.permissions.length < 10){
     for(let perm of user.permissions){
-      if(perm.indexOf("currentuser")){
+      if(perm.indexOf("currentuser") >= 0){
         challengeId = "owasp2017sensitive"
       } 
-      else if(perm.indexOf("messages")){
+      else if(perm.indexOf("messages") >= 0){
         challengeId = "owasp2017brokenauth"
         break
       }