-
lovetox
that tombstone thing is a pandoras box in my opinion
-
lovetox
or at least it will be source of many bugs
-
lovetox
the server needs to remove everything that could leak content of the message
-
lovetox
the only way to apply that is probably a whitelist of elements
-
lovetox
Zash, MattJ : is prosody injecting occupant-id into PMs?
-
lovetox
The XEP is saying nothing on this
-
lovetox
PMs are an abomination which will haunt me my whole life
-
lovetox
hm but with PMs, the MUC server cannot inject it into the carbons ..
-
lovetox
hm .. nothing stops me from forging a moderated tombstone
-
lovetox
https://xmpp.org/extensions/xep-0425.html#tombstones
-
lovetox
with normal moderated requests, we check that it comes from the bare room jid, but in a tombstone this check can not happen
-
lovetox
look the bad moderator censors all my messages :D
-
lovetox
a server needs to filter all moderated tags out of the messages
-
singpolyma
> hm .. nothing stops me from forging a moderated tombstone What would you be forging? That you send an empty message. Oh I see, you're saying you could sort of claim you were moderated when you were not ↺