Mercurial Mercurial > prosody > prosody / annotate
summary | shortlog | changelog | graph | tags | bookmarks | branches | files | changeset | file | latest | revisions | annotate | diff | comparison | raw | help
Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
doc/stanza_routing.txt
author Jonas Schäfer <jonas@wielicki.name>
Mon, 10 Jan 2022 18:23:54 +0100
branch0.11
changeset 12185 783056b4e448
parent 22 2856dfc1f5cc
permissions -rw-r--r--
util.xml: Do not allow doctypes, comments or processing instructions Yes. This is as bad as it sounds. CVE pending. In Prosody itself, this only affects mod_websocket, which uses util.xml to parse the <open/> frame, thus allowing unauthenticated remote DoS using Billion Laughs. However, third-party modules using util.xml may also be affected by this. This commit installs handlers which disallow the use of doctype declarations and processing instructions without any escape hatch. It, by default, also introduces such a handler for comments, however, there is a way to enable comments nontheless. This is because util.xml is used to parse human-facing data, where comments are generally a desirable feature, and also because comments are generally harmless.
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
12
90f22275f7ae Moved server module to net/
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset 
     1
 
No 'to' attribute:
90f22275f7ae Moved server module to net/
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset 
     2
 
	IQ:			Pass to appropriate handler
90f22275f7ae Moved server module to net/
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset 
     3
 
	Presence:		Broadcast to contacts
90f22275f7ae Moved server module to net/
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset 
     4
 
				- if initial presence, also send out presence probes
90f22275f7ae Moved server module to net/
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset 
     5
 
					- if probe would be to local user, generate presence stanza for them
90f22275f7ae Moved server module to net/
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset 
     6
 
	Message:		Route as if it is addressed to the bare JID of the sender
90f22275f7ae Moved server module to net/
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset 
     7
 












90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




     8


To a local host:













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




     9


	IQ:			Pass to appropriate handler













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    10


	Presence:		-













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    11


	Message:		Deliver to admin?













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    12














90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    13


To local contact:













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    14


	Bare JID:













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    15


		IQ:		Pass to appropriate handler













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    16


		Presence:	Broadcast to all resources













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    17


		Message:	Route to 'best' resource













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    18


	Full JID:













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    19


		IQ:		Send to resource













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    20


		Presence:	Send to resource













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    21


		Message:	Send to resource








21






ade26639f237
Updated stanza routing doc



Matthew Wild <mwild1@gmail.com>


parents: 
12

diff
changeset




    22


	Full JID but resource not connected:













ade26639f237
Updated stanza routing doc



Matthew Wild <mwild1@gmail.com>


parents: 
12

diff
changeset




    23


		IQ:		Return service-unavailable













ade26639f237
Updated stanza routing doc



Matthew Wild <mwild1@gmail.com>


parents: 
12

diff
changeset




    24


		Message:	Handle same as if to bare JID













ade26639f237
Updated stanza routing doc



Matthew Wild <mwild1@gmail.com>


parents: 
12

diff
changeset




    25


		Presence:	Drop (unless type=subscribe[ed])








12






90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    26














90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    27


To remote contact:













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    28


	Initiate s2s connection if necessary













90f22275f7ae
Moved server module to net/



Matthew Wild <mwild1@gmail.com>


parents: 

diff
changeset




    29


	Send stanza across








22






2856dfc1f5cc
Various documentation updates, and added names.txt :)



Matthew Wild <mwild1@gmail.com>


parents: 
21

diff
changeset




    30
















prosody