From c7662fa30d65449f7d41b6fe66118bd12530eba1 Mon Sep 17 00:00:00 2001
From: FreezePhoenix <24441367+FreezePhoenix@users.noreply.github.com>
Date: Wed, 15 Nov 2023 09:13:10 -0500
Subject: [PATCH] Fix CM Exploit (#62)

---
 node/server.js | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/node/server.js b/node/server.js
index cb7cc21..7fe3863 100644
--- a/node/server.js
+++ b/node/server.js
@@ -4115,7 +4115,7 @@ function init_io() {
 					}
 					if (method == "cm") {
 						var add = 1;
-						var len = data.message.length;
+						var len = JSON.stringify(data.message).length;
 						var mult = 1;
 						if (len > 100) {
 							add = 2;
@@ -4126,6 +4126,9 @@ function init_io() {
 						} else if (len > 50000) {
 							add = 20;
 						}
+						if (!Array.isArray(data.to)) {
+							data.to = [data.to];
+						}
 						// console.log("add: "+add+"len: "+len);
 						if (data.to.length > 1) {
 							mult = 0.8;