From fbef076ebc77e71db76d8ca09ffc40ecfe88efe7 Mon Sep 17 00:00:00 2001
From: iliajie <gpg@ilia.engineer>
Date: Thu, 27 Oct 2022 20:29:39 +0300
Subject: [PATCH] Fix not to expose active `socket` to a global scope

---
 xterm/index.cgi | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/xterm/index.cgi b/xterm/index.cgi
index 807994792..90ba5ff32 100644
--- a/xterm/index.cgi
+++ b/xterm/index.cgi
@@ -177,14 +177,18 @@ sleep(1);
 my $url = "wss://".$ENV{'HTTP_HOST'}.$wspath;
 my $term_script = <<EOF;
 
-var term = new Terminal($termjs_opts{'Options'}),
-    termcont = document.getElementById('terminal'),
-    socket = new WebSocket('$url', 'binary'),
-    attachAddon = new AttachAddon.AttachAddon(socket);
-termcont.focus();
-term.loadAddon(attachAddon);
-term.open(termcont);
-term.focus();
+(function() {
+	var socket = new WebSocket('$url', 'binary');
+	socket.onopen = function() {
+		var term = new Terminal($termjs_opts{'Options'}),
+		    termcont = document.getElementById('terminal'),
+		    attachAddon = new AttachAddon.AttachAddon(this);
+		term.loadAddon(attachAddon);
+		term.open(termcont);
+		term.focus();
+	};
+})();
+
 EOF
 
 # Return inline script data depending on type