moparisthebest
/
xeps
mirror of https://github.com/moparisthebest/xeps
1
0
Fork 0
Code Issues Releases Wiki Activity

XEP-0333: Amend XEP-0359 security note per feedback from Florian

This commit is contained in:
Matthew Wild 2020-04-15 15:35:38 +01:00 committed by Maxime “pep” Buquet
parent 07342d5fba
commit 0915bd786b
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
xep-0333.xml
View File

@ -253,10 +253,9 @@
the MUC-assigned id for Chat Markers. The id will be contained in a <stanza-id>
element inserted into the stanza with a 'by' attribute matching the MUC's own JID.</p>
<p>As per XEP-0359 security considerations, clients MUST only trust a &lt;stanza-id&gt;
element with a 'by' attribute that matches the MUC's own JID, and MUST ignore any such
element in MUCs that do not announce XEP-0359 support.</p>
<p>As per XEP-0359 security considerations, if XEP-0359 support is not announced then
&lt;stanza-id/&gt; elements with a 'by' attribute that match the MUC's own JID should
be considered spoofed and MUST be ignored.</p>
<example caption='Example MUC message with a markable Chat Marker'>
<![CDATA[
<message