github/claude-code-best
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: prevent SSE event cross-workspace leakage

Browse Source 
- Register session cwd before publishing created event (was async void,
  causing cwd to be undefined during event dispatch)
- Fix EventBus cwd filter: skip events when sessionCwd is undefined
  instead of allowing them through unfiltered

Co-Authored-By: claude-sonnet-4-6 <noreply@anthropic.com>
This commit is contained in:
DoSun 2026-05-15 09:15:30 +08:00
parent 196ff5ba21
commit 9f5502b4b6
2 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/server/eventBus.ts
View File

@ -74,7 +74,7 @@ export class EventBus {
const sid = dataObj?.session_id ?? dataObj?.sessionID const sid = dataObj?.session_id ?? dataObj?.sessionID
if (typeof sid === 'string') { if (typeof sid === 'string') {
const sessionCwd = this.sessionCwds.get(sid) const sessionCwd = this.sessionCwds.get(sid)
if (sessionCwd && sessionCwd !== client.cwdFilter) { if (sessionCwd !== client.cwdFilter) {
continue continue
} }
} }

5
src/server/sessionManager.ts
View File

@ -237,9 +237,8 @@ export class SessionManager {
this.sessions.set(sessionId, handle) this.sessions.set(sessionId, handle)
if (!opts.silent) { if (!opts.silent) {
void canonicalizePath(cwd).then(canonical => { const canonical = await canonicalizePath(cwd).catch(() => cwd)
this.eventBus.registerSessionCwd(sessionId, canonical) this.eventBus.registerSessionCwd(sessionId, canonical)
})
this.eventBus.publishSessionEvent(sessionId, 'created', { this.eventBus.publishSessionEvent(sessionId, 'created', {
status: 'starting', status: 'starting',
created_at: Date.now(), created_at: Date.now(),