From b52b6bea406793d3474abf385d0c3abfe7b01dc6 Mon Sep 17 00:00:00 2001 From: Matthew Wild Date: Tue, 7 Aug 2018 13:32:11 +0100 Subject: MUC: Suppress error text when participants are kicked due to error in semi-anon rooms (fixes #563) This prevents information leaks (such as the occupant's server domain) which may be included in error messages. --- plugins/muc/muc.lib.lua | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'plugins/muc') diff --git a/plugins/muc/muc.lib.lua b/plugins/muc/muc.lib.lua index d12f24b1..5a25cf81 100644 --- a/plugins/muc/muc.lib.lua +++ b/plugins/muc/muc.lib.lua @@ -362,7 +362,7 @@ function room_mt:handle_kickable(origin, stanza) -- luacheck: ignore 212 if occupant == nil then return nil; end local type, condition, text = stanza:get_error(); local error_message = "Kicked: "..(condition and condition:gsub("%-", " ") or "presence error"); - if text then + if text and room:get_whois() == "anyone" then error_message = error_message..": "..text; end occupant:set_session(real_jid, st.presence({type="unavailable"}) -- cgit v1.2.3