aboutsummaryrefslogtreecommitdiffstats
path: root/TODO
diff options
context:
space:
mode:
authorKim Alvefur <zash@zash.se>2019-07-20 04:19:58 +0200
committerKim Alvefur <zash@zash.se>2019-07-20 04:19:58 +0200
commit3204f55be1cbe4c9871584d0ee957f72afed8055 (patch)
treed3e14031365c5059107e696d558e1750ca1e1cb5 /TODO
parente081fd664251a2eb7ab68262c2b8a3cad4b381c7 (diff)
downloadprosody-3204f55be1cbe4c9871584d0ee957f72afed8055.tar.gz
prosody-3204f55be1cbe4c9871584d0ee957f72afed8055.zip
mod_websocket: Clone stanza before mutating (fixes #1398)
Checking for `stanza.attr.xmlns == nil` to determine if the stanza object is an actual stanza (`<message>`, `<presence>` or `<iq>` in the `jabber:client` or `jabbber:server` namespace) or some other stream element. Since this mutation is not reverted, it may leak to other places and cause them to mistreat stanzas as stream elements. Especially in cases like MUC where a single stanza is broadcast to many recipients.
Diffstat (limited to 'TODO')
0 files changed, 0 insertions, 0 deletions