From 993f73525583958fc68e23aba9255b2d2efaea4c Mon Sep 17 00:00:00 2001 From: Waqas Hussain Date: Fri, 2 Oct 2009 17:56:24 +0500 Subject: MUC: Prep given JID when changing affiliation. --- plugins/muc/muc.lib.lua | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'plugins') diff --git a/plugins/muc/muc.lib.lua b/plugins/muc/muc.lib.lua index 35bde4c6..93706b07 100644 --- a/plugins/muc/muc.lib.lua +++ b/plugins/muc/muc.lib.lua @@ -11,6 +11,7 @@ local datetime = require "util.datetime"; local jid_split = require "util.jid".split; local jid_bare = require "util.jid".bare; +local jid_prep = require "util.jid".prep; local st = require "util.stanza"; local log = require "util.logger".init("mod_muc"); local multitable_new = require "util.multitable".new; @@ -412,6 +413,13 @@ function room_mt:handle_to_room(origin, stanza) -- presence changes and groupcha if item and item.name == "item" then if type == "set" then local callback = function() origin.send(st.reply(stanza)); end + if item.attr.jid then -- Validate provided JID + item.attr.jid = jid_prep(item.attr.jid); + if not item.attr.jid then + origin.send(st.error_reply(stanza, "modify", "jid-malformed")); + return; + end + end if not item.attr.jid and item.attr.nick then -- COMPAT Workaround for Miranda sending 'nick' instead of 'jid' when changing affiliation local occupant = self._occupants[self.jid.."/"..item.attr.nick]; if occupant then item.attr.jid = occupant.jid; end -- cgit v1.2.3