1
0
mirror of https://github.com/moparisthebest/xeps synced 2024-12-21 23:28:51 -05:00

Merge branch 'merge/xep-0280'

This commit is contained in:
Jonas Schäfer 2019-09-11 17:37:29 +02:00
commit 716f2c08c2

View File

@ -45,6 +45,12 @@
<email>linuxwolf@outer-planes.net</email>
<jid>linuxwolf@outer-planes.net</jid>
</author>
<revision>
<version>0.13.1</version>
<date>2019-09-11</date>
<initials>gl</initials>
<remark><p>Add clear example on problematic (spoofed) carbon messages and that they need to be handled.</p></remark>
</revision>
<revision>
<version>0.13.0</version>
<date>2019-04-24</date>
@ -360,6 +366,24 @@
</forwarded>
</received>
</message>
]]></example>
<p>A client MUST NOT accept Carbons that originate from a different JID than the own account (See <link url='#security'>Security Considerations</link>).</p>
<example caption='Tybalt attempts Carbons impersonation attack on Romeo'><![CDATA[
<message xmlns='jabber:client'
from='tybalt@capulet.example/home'
to='romeo@montague.example'
type='chat'>
<received xmlns='urn:xmpp:carbons:2'>
<forwarded xmlns='urn:xmpp:forward:0'>
<message xmlns='jabber:client'
from='juliet@capulet.example/balcony'
to='romeo@montague.example/garden'
type='chat'>
<body>Thou shall meet me tonite, at our house's hall!</body>
</message>
</forwarded>
</received>
</message>
]]></example>
</section1>