チャットルームへの接続時にセッションが存在しない場合ははじくようにした

diff --git a/chat.js b/chat.js
index c49bb9d..2e901f4 100644 (file)
--- a/chat.js
+++ b/chat.js
@@ -478,9 +478,11 @@ function ParseAuthorization(handshakeData, callback)
                                result = "failed get from session store";\r
                        else if(err)\r
                                result = err;\r
+                       else if(typeof(session) == "undefined" || typeof(session._csrf) == "undefined")\r
+                               result = "session is undefined";\r
                        else if(handshakeData.query.token != session._csrf)\r
                                result = "invaild token";\r
-                       if(typeof(session) != "undefined" && result == null)\r
+                       if(result == null)\r
                                handshakeData.sessionID = sessionID;\r
                        callback(result,result == null && !err);\r
                });\r