diff options
| author | Kim Alvefur <zash@zash.se> | 2015-10-18 14:00:15 +0200 |
|---|---|---|
| committer | Kim Alvefur <zash@zash.se> | 2015-10-18 14:00:15 +0200 |
| commit | 1173ee03d3daede409447b6eb049c1ca06145f50 (patch) | |
| tree | dbd1f4ff6547c1b2a2fe1ffde3957668af6d78e5 | |
| parent | 111471eea8aeabda5c91b05ac759b57497be2706 (diff) | |
| download | prosody-1173ee03d3daede409447b6eb049c1ca06145f50.tar.gz prosody-1173ee03d3daede409447b6eb049c1ca06145f50.zip | |
MUC: Reject muc:admin query with missing <item> child
| -rw-r--r-- | plugins/muc/muc.lib.lua | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/plugins/muc/muc.lib.lua b/plugins/muc/muc.lib.lua index cb182fec..7db463e5 100644 --- a/plugins/muc/muc.lib.lua +++ b/plugins/muc/muc.lib.lua @@ -723,6 +723,9 @@ end function room_mt:handle_admin_query_set_command(origin, stanza) local item = stanza.tags[1].tags[1]; + if not item then + origin.send(st.error_reply(stanza, "cancel", "bad-request")); + end if item.attr.jid then -- Validate provided JID item.attr.jid = jid_prep(item.attr.jid); if not item.attr.jid then |