diff options
| author | Matthew Wild <mwild1@gmail.com> | 2011-11-26 03:50:51 +0000 |
|---|---|---|
| committer | Matthew Wild <mwild1@gmail.com> | 2011-11-26 03:50:51 +0000 |
| commit | aa93f9a29b0b01cc2a61a55d3b643a7a4ea2bcfb (patch) | |
| tree | 698c76c3ae165952fc7ebd04837829ce11d24b96 /util/dependencies.lua | |
| parent | 400449ed020462fe86f61d30b5ea7d79e76accca (diff) | |
| parent | c2409b3604775f62a3f251d673bb85f138a9a95c (diff) | |
| download | prosody-aa93f9a29b0b01cc2a61a55d3b643a7a4ea2bcfb.tar.gz prosody-aa93f9a29b0b01cc2a61a55d3b643a7a4ea2bcfb.zip | |
Merge with Florob
Diffstat (limited to 'util/dependencies.lua')
| -rw-r--r-- | util/dependencies.lua | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/util/dependencies.lua b/util/dependencies.lua index 5baea942..53d2719d 100644 --- a/util/dependencies.lua +++ b/util/dependencies.lua @@ -136,6 +136,14 @@ function log_warnings() log("error", "This version of LuaSec contains a known bug that causes disconnects, see http://prosody.im/doc/depends"); end end + if lxp then + if not pcall(lxp.new, { StartDoctypeDecl = false }) then + log("error", "The version of LuaExpat on your system leaves Prosody " + .."vulnerable to denial-of-service attacks. You should upgrade to " + .."LuaExpat 1.1.1 or higher as soon as possible. See " + .."http://prosody.im/doc/depends#luaexpat for more information."); + end + end end return _M; |