jdev - 2020-07-27

  1. lovetox

    Zash does prosody enforce stringprep on the Resource, for example MUC nicknames?

  2. lovetox

    and what does prosody do if it receives a MUC message from a remote MUC with invalid resource

  3. Zash

    Hm, don't I have a writeup of this somewhere?

  4. Zash

    The next version (0.12 / current trunk) does strict enforcement on locally created things, and somewhat relaxed checks on things from elsewhere.

  5. Zash

    Older versions did relaxed checks on everything for some reason that's been lost in the mist of time

  6. Zash

    Strict/relaxed refers to whether unassigned code points are allowed or not.

  7. Zash

    https://hg.prosody.im/trunk/log?rev=tip%250.11+and+keyword%28%22strict%22%29

  8. Zash

    TL:DR "Be conservative in what you send and liberal in what you accept"

  9. Zash

    https://hg.prosody.im/trunk/rev/64ddcbc9a328 > Being strict on s2s leads to interop problems and poor experiences, ie > users being ejected from MUCs if something invalid enters. By starting > with tightening up input into the network, we may be able to gradually > approach a point where no invalid JIDs are allowed.