Arsharth/hydrogen-web
1
0
Fork 0
forked from mystiq/hydrogen-web
Code Issues Pull requests Projects Releases Packages Wiki Activity

some comments

Browse source
This commit is contained in:
Bruno Windels 2019-03-08 20:03:47 +01:00
parent ec925d7c49
commit 95bef00054
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/matrix/hs-api.js
View file

@ -21,6 +21,8 @@ class RequestWrapper {
export default class HomeServerApi { export default class HomeServerApi {
constructor(homeserver, accessToken) { constructor(homeserver, accessToken) {
// store these both in a closure somehow so it's harder to get at in case of XSS?
// one could change the homeserver as well so the token gets sent there, so both must be protected from read/write
this._homeserver = homeserver; this._homeserver = homeserver;
this._accessToken = accessToken; this._accessToken = accessToken;
} }