Skip to content

Conversation

@gabriellsh
Copy link
Member

@gabriellsh gabriellsh commented Feb 19, 2025

Proposed changes (including videos or screenshots)

There are 2 things that in conjunction cause this issue:

  1. RoomRoute component was keeping it's state when transitioning through different rooms. This causes the room's type and reference (id or name) property to be incorrectly extracted from the URL, and reference becomes null.

  2. getRoomByTypeAndName method returns the first DM subscription ever created if you send the parameters type as 'd' and name as null. It only results in that DM if you have access to it (e.g you created or is part of it), so it's not a security issue, but shouldn't happen.

Issue(s)

CORE-1060

Steps to test or reproduce

  1. Create a new server and register your admin account.
  2. Create a new user, and a DM with said user.
  3. On the browser devtools, go to performance tab and set CPU throttling to 6x (this depends on your PC's hardware, so you might need more or less throttling).
  4. Open the web application, navigate to a room, than to the new DM, then try to go back.
  5. An error should be shown.

Further comments

@dionisio-bot
Copy link
Contributor

dionisio-bot bot commented Feb 19, 2025

Looks like this PR is ready to merge! 🎉
If you have any trouble, please check the PR guidelines

@changeset-bot
Copy link

changeset-bot bot commented Feb 19, 2025

🦋 Changeset detected

Latest commit: 1bc2e3d

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 35 packages
Name Type
@rocket.chat/meteor Patch
@rocket.chat/core-typings Patch
@rocket.chat/rest-typings Patch
@rocket.chat/uikit-playground Patch
@rocket.chat/api-client Patch
@rocket.chat/apps Patch
@rocket.chat/core-services Patch
@rocket.chat/cron Patch
@rocket.chat/ddp-client Patch
@rocket.chat/freeswitch Patch
@rocket.chat/fuselage-ui-kit Patch
@rocket.chat/gazzodown Patch
@rocket.chat/livechat Patch
@rocket.chat/model-typings Patch
@rocket.chat/ui-contexts Patch
@rocket.chat/account-service Patch
@rocket.chat/authorization-service Patch
@rocket.chat/ddp-streamer Patch
@rocket.chat/omnichannel-transcript Patch
@rocket.chat/presence-service Patch
@rocket.chat/queue-worker Patch
@rocket.chat/stream-hub-service Patch
@rocket.chat/license Patch
@rocket.chat/omnichannel-services Patch
@rocket.chat/pdf-worker Patch
@rocket.chat/presence Patch
rocketchat-services Patch
@rocket.chat/models Patch
@rocket.chat/network-broker Patch
@rocket.chat/ui-avatar Patch
@rocket.chat/ui-client Patch
@rocket.chat/ui-video-conf Patch
@rocket.chat/ui-voip Patch
@rocket.chat/web-ui-registration Patch
@rocket.chat/instance-status Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@gabriellsh gabriellsh marked this pull request as ready for review February 19, 2025 23:24
@gabriellsh gabriellsh requested review from a team as code owners February 19, 2025 23:24
@codecov
Copy link

codecov bot commented Feb 19, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 59.44%. Comparing base (8e99a2e) to head (1bc2e3d).
Report is 1 commits behind head on develop.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff            @@
##           develop   #35269   +/-   ##
========================================
  Coverage    59.44%   59.44%           
========================================
  Files         2829     2829           
  Lines        68326    68326           
  Branches     15131    15131           
========================================
  Hits         40614    40614           
  Misses       25054    25054           
  Partials      2658     2658           
Flag Coverage Δ
unit 75.53% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

@gabriellsh gabriellsh added this to the 7.4.0 milestone Feb 20, 2025
@rodrigok rodrigok added the stat: QA assured Means it has been tested and approved by a company insider label Feb 20, 2025
@dionisio-bot dionisio-bot bot added the stat: ready to merge PR tested and approved waiting for merge label Feb 20, 2025
@kodiakhq kodiakhq bot merged commit 2bdab2f into develop Feb 20, 2025
49 of 50 checks passed
@kodiakhq kodiakhq bot deleted the fix/reDirect branch February 20, 2025 13:19
@scuciatto scuciatto modified the milestones: 7.4.0, 7.5.0 Feb 25, 2025
@julio-rocketchat
Copy link
Member

/backport 7.3.6

@dionisio-bot
Copy link
Contributor

dionisio-bot bot commented Jun 20, 2025

Pull request #36266 added to Project: "Patch 7.3.6"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

stat: QA assured Means it has been tested and approved by a company insider stat: ready to merge PR tested and approved waiting for merge

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants