| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Before forwarding last activity requests to a user, check that the user's ↵ | Andreas Köhler | 2010-11-10 | 1 | -0/+19 | |
| | | | | | | | | | | | | | | | | presence is visible for From According to XEP-0012, 4. Online User Query, "if the requesting entity is not authorized to view the user's presence information (normally via a presence subscription as defined in XMPP IM), the user's server MUST NOT deliver the IQ-get to an available resource but instead MUST return a <forbidden/> error in response to the last activity request." So check for a subscription of from of the jid and bare jid and whether outgoing presences to From are allowed. Fixes problem 3 of EJAB-1158. | |||||
| * | Remove dead code for NS_VCARD iq packets from ejabberd_c2s | Andreas Köhler | 2010-11-10 | 1 | -13/+0 | |
| | | | | | | | | | For EJAB-1045, the special NS_VCARD block for handling incoming vcard iqs on behalf of clients has already been restricted to cases where the user or resource part of the recipient is empty. But then the packets should not have been routed to the c2s process anyway. This patch completely removes it. | |||||
| * | Use ejabberd_c2s:privacy_check_packet/5 for all those hook folded runs in ↵ | Andreas Köhler | 2010-11-10 | 1 | -75/+10 | |
| | | | | | the c2s module | |||||
| * | Use c2s state data as user and server in ejabberd_c2s:is_privacy_allow | Andreas Köhler | 2010-11-10 | 1 | -15/+16 | |
| | | | | | | | | | | | | | is_privacy_allow is only used in ejabberd_c2s:handle_info/3 to determine for a few presence types whether the packet is allowed to be forwarded to the user's client. This only makes sense if To#jid.user and To#jid.server match StateData#state.user and StateData#state.server. Also, add the atom in as parameter to a new argument Dir of is_privacy_allow and extract from that function privacy_check_packet(StateData, From, To, Packet, Dir) which runs the privavcy check without converting allow/deny to true/false. | |||||
| * | Correct error responses of forbidden offline last activity queries | Andreas Köhler | 2010-11-10 | 1 | -2/+2 | |
| | | | | | | | | According to XEP-0012 Last Activity, the server must return iq errors with forbidden instead of not-allowed. Fixes problem 1 of EJAB-1158. | |||||
| * | populate pubsub#roster_groups_allowed in node configuration options (thanks ↵ | Christophe Romain | 2010-11-10 | 1 | -3/+16 | |
| | | | | | to Karim Gemayel)(EJAB-1344) | |||||
| * | fix bad plugin order issue injected in previous patch (EJAB-1286) | Christophe Romain | 2010-11-09 | 1 | -2/+2 | |
| | | ||||||
| * | Correct privacy check direction in mod_last (EJAB-1339) | Andreas Köhler | 2010-11-09 | 2 | -4/+4 | |
| | | | | | | | | The change for EJAB-1271 to change the direction of the privacy check from out to in violates the idea that the check should imitate a subscription state check of from. Rather correct the order of the From and To parameters. | |||||
| * | Change max restart strategy of ejabberd_odbc_sup to handle some SQL timeouts. | Andreas Köhler | 2010-11-08 | 1 | -1/+1 | |
| | | ||||||
| * | Improve the IQ error stanzas to provide an explanation (EJAB-1262) | Badlop | 2010-11-08 | 1 | -8/+8 | |
| | | ||||||
| * | avoid node_call to break transaction (thanks to Karim Gemayel)(EJAB-1286) | Christophe Romain | 2010-11-08 | 1 | -7/+12 | |
| | | ||||||
| * | Re-raise exceptions caught in gen_mod:start_module/3 (EJAB-1335) | Andreas Köhler | 2010-11-07 | 1 | -5/+5 | |
| | | | | | | | | | | | Modules configured by the administrator normally should not be treated as optional, so a exception (error, exit, throw) to start them should not be caught and logged only. This patch re-raises a caught exception instead of ignoring the exception and inserting the module's opts on success. That way gen_mod:get_module_opt/4 should work while calling Module:start/2. | |||||
| * | Fix register | Badlop | 2010-11-06 | 1 | -2/+3 | |
| | | ||||||
| * | Take care of xml:lang attribute in unauthenticated stanzas as well | Evgeniy Khramtsov | 2010-11-06 | 1 | -1/+11 | |
| | | ||||||
| * | Disable LRU caching algorithm for LDAP shared rosters | Evgeniy Khramtsov | 2010-11-06 | 2 | -53/+96 | |
| | | ||||||
| * | Do not store long language tag to avoid possible DoS/flood attacks | Evgeniy Khramtsov | 2010-11-06 | 1 | -1/+13 | |
| | | ||||||
| * | LDAP shared roster support (thanks to Realloc and Marcin Owsiany) | Evgeniy Khramtsov | 2010-11-06 | 1 | -0/+684 | |
| | | ||||||
| * | New ip_access option restricts which IPs can register (thanks to Alexey ↵ | Badlop | 2010-11-05 | 3 | -6/+116 | |
| | | | | | Shchepin)(EJAB-915) | |||||
| * | Disable mod_register_web in default config because by default captcha is ↵ | Badlop | 2010-11-05 | 1 | -3/+3 | |
| | | | | | disabled | |||||
| * | Added mod_register_web: web page for account registration (EJAB-471) | Badlop | 2010-11-05 | 4 | -0/+656 | |
| | | ||||||
| * | Fix warnings detected by Dialyzer | Badlop | 2010-11-04 | 2 | -10/+6 | |
| | | ||||||
| * | Fixes a leak of ejabberd_receiver processes. | Jonas Ådahl | 2010-11-03 | 1 | -1/+7 | |
| | | | | | | | When a (non-frontend) socket module without any custom receiver fails to start, the newly created ejabberd_receiver process needs to be properly closed. | |||||
| * | Don't add Pid to Captcha record when it's requested by c2s instead of muc | Badlop | 2010-11-03 | 1 | -2/+1 | |
| | | ||||||
| * | Handle incoherence of argument type in calls to remove_user | Badlop | 2010-11-03 | 1 | -1/+6 | |
| | | ||||||
| * | Additional fixes for previous captcha commits related to exmpp | Badlop | 2010-11-03 | 3 | -5/+6 | |
| | | ||||||
| * | Include a Required xml element in the captcha field | Badlop | 2010-11-03 | 1 | -0/+2 | |
| | | ||||||
| * | Add top-level instructions for x:data incompatible clients | Evgeniy Khramtsov | 2010-11-03 | 1 | -1/+9 | |
| | | ||||||
| * | Changes in registration form to workaround client problems (EJAB-1262) | Badlop | 2010-11-03 | 1 | -4/+24 | |
| | | | | | | | | | Changes included: * Remove var in fixed field because Gajim and Tkabber display it to user * Add workaround for Psi's overlap fields * Add var=url attribute, required by Psi to display the field * Provide the image URL as a copy-able form field | |||||
| * | Workaround for Psi's wrong Type in form submission | Badlop | 2010-11-03 | 1 | -0/+2 | |
| | | ||||||
| * | Add CAPTCHA example configurations to cfg (EJAB-1262)(EJAB-1326) | Badlop | 2010-11-03 | 1 | -0/+10 | |
| | | ||||||
| * | Provide image url in registration form when captcha is enabled | Evgeniy Khramtsov | 2010-11-03 | 1 | -0/+6 | |
| | | ||||||
| * | Add password entropy check (EJAB-1326) | Evgeniy Khramtsov | 2010-11-03 | 3 | -17/+77 | |
| | | ||||||
| * | Rename option captcha to captcha_protected for consistency | Evgeniy Khramtsov | 2010-11-03 | 2 | -1/+3 | |
| | | ||||||
| * | CAPTCHA IBR support (EJAB-1262)(thanks to Evgeniy Khramtsov) | Badlop | 2010-11-03 | 2 | -33/+204 | |
| | | ||||||
| * | Fix crash in ejabberd_c2s when blacklist hook returned true (thanks to Jonas ↵ | Badlop | 2010-11-02 | 2 | -4/+4 | |
| | | | | | | | | Ådahl) Cause of the crash jlib:ip_to_list/1 only supports IP tuples using the form {N1,N2,N3,N4} which is not the case when IPv6 is enabled. | |||||
| * | Fix errors in EDoc comments | Badlop | 2010-10-28 | 1 | -3/+3 | |
| | | ||||||
| * | Handle binary data from SockMod:recv in ejabberd_http:recv_data/3 (thanks to ↵ | Badlop | 2010-10-27 | 1 | -2/+5 | |
| | | | | | Andreas Köhler)(EJAB-1331) | |||||
| * | Ignore Length argument to tls:recv/[23] (EJAB-1327) | Andreas Köhler | 2010-10-26 | 1 | -2/+4 | |
| | | | | | | The Length argument cannot be used for gen_tcp:recv/3, because the compressed size does not equal the desired uncompressed one. | |||||
| * | Re-use the TLSSock argument in tls:send/2 (EJAB-1327) | Andreas Köhler | 2010-10-26 | 1 | -2/+2 | |
| | | ||||||
| * | Improve example of outoging_s2s_options | Badlop | 2010-10-22 | 1 | -1/+2 | |
| | | ||||||
| * | add function specification, convert string() to binary(), fix pubsub.hrl ↵ | Christophe Romain | 2010-10-19 | 4 | -1648/+2230 | |
| | | | | | (thanks to Karim Gemayel) | |||||
| * | Change directory before any operation to one readable by INSTALLUSER (EJAB-1322) | Peter Lemenkov | 2010-10-19 | 1 | -0/+4 | |
| | | | | | | | | | | | This is required in order to suppress error messages like "File operation error: eacces" when ejabberd was started from directory, which is not readable by INSTALLUSER (/root, for example). See rhbz #564686: https://bugzilla.redhat.com/564686 Signed-off-by: Peter Lemenkov <lemenkov@gmail.com> | |||||
| * | Fix bug in mod_pubsub in_subscription return value | Badlop | 2010-10-19 | 1 | -4/+6 | |
| | | ||||||
| * | Fix bug when routing error stanza | Badlop | 2010-10-16 | 1 | -3/+4 | |
| | | ||||||
| * | When privacy list denies local user's outgoing stanza, try to return error ↵ | Badlop | 2010-10-16 | 1 | -0/+6 | |
| | | | | | | | | | (EJAB-1320) See: http://xmpp.org/extensions/xep-0016.html#example-51 Example 51. Error: contact is blocked | |||||
| * | Check privacy of outgoing Message stanzas (EJAB-1320) | Badlop | 2010-10-16 | 1 | -1/+2 | |
| | | ||||||
| * | Add support to ejabberd_ctl to handle anonymous command arguments | Badlop | 2010-10-16 | 1 | -0/+4 | |
| | | ||||||
| * | Rename aclocal.m4 to acinclude.m4 (thanks to Andreas Köhler) | Badlop | 2010-10-15 | 4 | -5/+20 | |
| | | | | | | | | | | Also fixed minor typos, added the compiled aclocal.m4 to gitignore, and documented how to build the script 'configure'. Related documentation: http://www.gnu.org/software/hello/manual/automake/Local-Macros.html#Local-Macros http://www.gnu.org/software/hello/manual/automake/Invoking-aclocal.html#Invoking-aclocal | |||||
| * | Fix errors detected by Dialyzer | Badlop | 2010-10-15 | 4 | -9/+12 | |
| | | ||||||
| * | Document ejabberd_loglevel using EDoc (EJAB-225) | Badlop | 2010-10-15 | 1 | -0/+15 | |
| | | ||||||
