diff options
| author | Jeremy Lainé <jeremy.laine@m4x.org> | 2010-08-23 15:43:05 +0000 |
|---|---|---|
| committer | Jeremy Lainé <jeremy.laine@m4x.org> | 2010-08-23 15:43:05 +0000 |
| commit | 1600b5dee7aa289fa9f64a5669a0502d4b1ada0e (patch) | |
| tree | ed99f1fcbbebaf1e6234ad435e341597f38fdb6f /src/QXmppIncomingServer.cpp | |
| parent | bb70b6c629e2d422f4bd648cf4b251456a15a643 (diff) | |
| download | qxmpp-1600b5dee7aa289fa9f64a5669a0502d4b1ada0e.tar.gz | |
fix security check on incoming XMPP stanzas
Diffstat (limited to 'src/QXmppIncomingServer.cpp')
| -rw-r--r-- | src/QXmppIncomingServer.cpp | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/src/QXmppIncomingServer.cpp b/src/QXmppIncomingServer.cpp index ea8702e3..5ebaa6ac 100644 --- a/src/QXmppIncomingServer.cpp +++ b/src/QXmppIncomingServer.cpp @@ -143,7 +143,10 @@ void QXmppIncomingServer::handleStanza(const QDomElement &stanza) emit dialbackRequestReceived(request); } - } else if (!d->authenticated.isEmpty() && stanza.attribute("from").split("@").last() == d->authenticated) { + } + else if (!d->authenticated.isEmpty() && + jidToDomain(stanza.attribute("from")) == d->authenticated) + { // relay packets if the remote party is authenticated bool handled = false; emit elementReceived(stanza, handled); |
