MUC: Reject muc:admin query with missing <item> child
authorKim Alvefur <zash@zash.se>
Sun, 18 Oct 2015 14:00:15 +0200
changeset 6912 494938dec5d8
parent 6911 047becf393ca
child 6923 7596c37e0a63
MUC: Reject muc:admin query with missing <item> child
plugins/muc/muc.lib.lua
--- a/plugins/muc/muc.lib.lua	Sat Oct 17 19:31:43 2015 +0200
+++ b/plugins/muc/muc.lib.lua	Sun Oct 18 14:00:15 2015 +0200
@@ -723,6 +723,9 @@
 
 function room_mt:handle_admin_query_set_command(origin, stanza)
 	local item = stanza.tags[1].tags[1];
+	if not item then
+		origin.send(st.error_reply(stanza, "cancel", "bad-request"));
+	end
 	if item.attr.jid then -- Validate provided JID
 		item.attr.jid = jid_prep(item.attr.jid);
 		if not item.attr.jid then