Projects tigase _server server-core Issues #46
tigase doesn't validate value for the type='group' (#46)
Wojciech Kapcia (Tigase) opened 1 decade ago

If the type is "group", then the 'value' attribute SHOULD contain the name of a group in the user's roster. (If a client attempts to update, create, or delete a list item with a group that is not in the user's roster, the server SHOULD return to the client an stanza error.)

  • Andrzej Wójcik (Tigase) commented 1 decade ago

    Added validation of added/updated privacy list

  • Wojciech Kapcia (Tigase) commented 1 decade ago

    Even with correct group name getting :

    <iq type="get" id="prv1">
    <query xmlns="jabber:iq:roster"/>
    </iq>
    
    <iq type="result" id="prv1" to="admin@firefly/wojtek-laptok">
    <query xmlns="jabber:iq:roster">
    <item subscription="both" name="tigase1" jid="tigase1@firefly">
    <group>group1</group>
    </item>
    </query>
    </iq>
    
    
    <iq type="set" id="ab1da">
    <query xmlns="jabber:iq:privacy">
    <list name="blocked">
    <item action="deny" order="100" type="group" value="group1">
    <message/>
    </item>
    <item action="allow" order="110"/>
    </list>
    </query>
    </iq>
    
    
    <iq type="error" id="ab1da" to="admin@firefly/wojtek-laptok">
    <query xmlns="jabber:iq:privacy">
    <list name="blocked">
    <item action="deny" order="100" value="group1" type="group">
    <message/>
    </item>
    <item action="allow" order="110"/>
    </list>
    </query>
    <error type="cancel" code="404">
    <item-not-found xmlns="urn:ietf:params:xml:ns:xmpp-stanzas"/>
    </error>
    </iq>
    
    
    
  • Andrzej Wójcik (Tigase) commented 1 decade ago

    Fixed group name validation

issue 1 of 1
Type
Bug
Priority
Minor
Assignee
RedmineID
114
Version
tigase-server-5.2.0
Estimation
0
Spent time
0
Issue Votes (0)
Watchers (0)
Reference
tigase/_server/server-core#46
Please wait...
Page is in error, reload to recover