Openfire

Don't allow setup affiliations for invalid JIDs

Details

  • Type: Bug Bug
  • Status: Resolved Resolved
  • Priority: Major Major
  • Resolution: Fixed
  • Affects Version/s: 3.6.4
  • Fix Version/s: 3.7.0 beta
  • Component/s: MUC
  • Labels:
    None
  • Acceptance Test - Add?:
    No

Description

A room owner or admin is able to setup invalid room affiliations. At least with the room configuration it is possible to apply invalid JIDs for administrators or owners affiliations.

Activity

Hide
Guenther Niess added a comment -

The attached patch change the functions to add room affiliations only with an JID object instead of a String. The former methods will be marked as deprecated. The InvalidArgumentException for invalid JIDs is catched in the MUCUser object where the requests are processed.

Show
Guenther Niess added a comment - The attached patch change the functions to add room affiliations only with an JID object instead of a String. The former methods will be marked as deprecated. The InvalidArgumentException for invalid JIDs is catched in the MUCUser object where the requests are processed.
Hide
Guus der Kinderen added a comment -

applied patch.

Show
Guus der Kinderen added a comment - applied patch.

People

Vote (1)
Watch (3)

Dates

  • Created:
    Updated:
    Resolved: