copyleftie/gajim-plural
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

prevent affiliatio spoofing by checking namespace. Fixes #4323

Browse source
This commit is contained in:
Yann Leboulanger 2008-09-16 08:30:27 +00:00
parent 330dd0e7a1
commit 3e2f9fcbec
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/common/xmpp/protocol.py
View file

@ -502,10 +502,14 @@ class Presence(Protocol):
def _muc_getItemAttr(self,tag,attr): def _muc_getItemAttr(self,tag,attr):
for xtag in self.getTags('x'): for xtag in self.getTags('x'):
if xtag.getNamespace() not in (NS_MUC_USER, NS_MUC_ADMIN):
continue
for child in xtag.getTags(tag): for child in xtag.getTags(tag):
return child.getAttr(attr) return child.getAttr(attr)
def _muc_getSubTagDataAttr(self,tag,attr): def _muc_getSubTagDataAttr(self,tag,attr):
for xtag in self.getTags('x'): for xtag in self.getTags('x'):
if xtag.getNamespace() not in (NS_MUC_USER, NS_MUC_ADMIN):
continue
for child in xtag.getTags('item'): for child in xtag.getTags('item'):
for cchild in child.getTags(tag): for cchild in child.getTags(tag):
return cchild.getData(),cchild.getAttr(attr) return cchild.getData(),cchild.getAttr(attr)