Merged with head

readme.md

@@ -7,8 +7,6 @@ A client centric websocket service that lets the clients put anything on a share
 
 It is inspired by redux, and my desire to rapidly prototype browserbased multiplayer games.
 
-
 # Todo
 * Scopes, server-private scopes
-* Private actions, add "public:set", "public:set:all" etc.
-* Multiple reducers?
+* Add XSS protection and fix the lodash securety issue..

src/table.js

@@ -39,15 +39,12 @@ module.exports = function ({ initialState = {}, reducers = {}, effects = [], pin
 
         ctx.websocket.on('message', (rawReq) => {
             const req = JSON.parse(rawReq);
-
-            const allowed = allowedActions.reduce((acc, curr) => {
-                return acc || (req.type.indexOf(curr) > -1)
-            }, false)
+            const allowed = allowedActions.indexOf(req.type) > -1;
 
             if(allowed) {
                 store.dispatch({
-                    type: req.type ? req.type : 'message',
-                    data: req.data ? req.data : rawReq,
+                    type: req.type,
+                    data: req.data,
                     socket: ctx.websocket
                 });
             }