Thu, 04 Mar 2010 02:22:45 +0500
stanza_router: Don't send error replies for stanzas of type 'error' and 'result' on unbound authenticated connections.
core/stanza_router.lua | file | annotate | diff | comparison | revisions |
--- a/core/stanza_router.lua Thu Mar 04 02:20:17 2010 +0500 +++ b/core/stanza_router.lua Thu Mar 04 02:22:45 2010 +0500 @@ -41,7 +41,9 @@ and not(stanza.name == "iq" and stanza.attr.type == "set" and stanza.tags[1] and stanza.tags[1].name == "bind" and stanza.tags[1].attr.xmlns == "urn:ietf:params:xml:ns:xmpp-bind") then -- authenticated client isn't bound and current stanza is not a bind request - origin.send(st.error_reply(stanza, "auth", "not-authorized")); -- FIXME maybe allow stanzas to account or server + if stanza.attr.type ~= "result" and stanza.attr.type ~= "error" then + origin.send(st.error_reply(stanza, "auth", "not-authorized")); -- FIXME maybe allow stanzas to account or server + end return; end