core.sessionmanager: Require that client-requested resources pass strict resourceprep
authorKim Alvefur <zash@zash.se>
Sat, 02 Nov 2019 15:39:01 +0100
changeset 10382 04c4750ff8d2
parent 10381 4c36bc28b99e
child 10383 b917602eac04
core.sessionmanager: Require that client-requested resources pass strict resourceprep
core/sessionmanager.lua
--- a/core/sessionmanager.lua	Sat Nov 02 15:29:13 2019 +0100
+++ b/core/sessionmanager.lua	Sat Nov 02 15:39:01 2019 +0100
@@ -150,7 +150,7 @@
 		resource = event_payload.resource;
 	end
 
-	resource = resourceprep(resource or "");
+	resource = resourceprep(resource or "", true);
 	resource = resource ~= "" and resource or generate_identifier();
 	--FIXME: Randomly-generated resources must be unique per-user, and never conflict with existing