some comments
This commit is contained in:
parent
ec925d7c49
commit
95bef00054
1 changed files with 3 additions and 1 deletions
|
@ -21,7 +21,9 @@ class RequestWrapper {
|
|||
|
||||
export default class HomeServerApi {
|
||||
constructor(homeserver, accessToken) {
|
||||
this._homeserver = homeserver;
|
||||
// store these both in a closure somehow so it's harder to get at in case of XSS?
|
||||
// one could change the homeserver as well so the token gets sent there, so both must be protected from read/write
|
||||
this._homeserver = homeserver;
|
||||
this._accessToken = accessToken;
|
||||
}
|
||||
|
||||
|
|
Reference in a new issue