jdev - 2020-07-27

Zash does prosody enforce stringprep on the Resource, for example MUC nicknames?

and what does prosody do if it receives a MUC message from a remote MUC with invalid resource

Hm, don't I have a writeup of this somewhere?

The next version (0.12 / current trunk) does strict enforcement on locally created things, and somewhat relaxed checks on things from elsewhere.

Older versions did relaxed checks on everything for some reason that's been lost in the mist of time

Strict/relaxed refers to whether unassigned code points are allowed or not.

https://hg.prosody.im/trunk/log?rev=tip%250.11+and+keyword%28%22strict%22%29

TL:DR "Be conservative in what you send and liberal in what you accept"

https://hg.prosody.im/trunk/rev/64ddcbc9a328 > Being strict on s2s leads to interop problems and poor experiences, ie > users being ejected from MUCs if something invalid enters. By starting > with tightening up input into the network, we may be able to gradually > approach a point where no invalid JIDs are allowed.