Software /
code /
prosody-modules
File
mod_readonly/mod_readonly.lua @ 3447:5f2eeebcf899
mod_client_certs: do not crash on plain sockets
In some situations (e.g., reverse-proxied websocket), non-TLS sockets
can be marked as secure, causing mod_client_certs to call the undefined
method getpeercertificate and crash.
author | Thibaut Girka <thib@sitedethib.com> |
---|---|
date | Fri, 18 Jan 2019 14:06:05 +0100 |
parent | 3270:7776c9dc5f37 |
line wrap: on
line source
local st = require "util.stanza"; local stores = module:get_option("readonly_stores", { vcard = { "vcard-temp", "vCard" }; }); local namespaces = {}; for name, namespace in pairs(stores) do namespaces[table.concat(namespace, ":")] = name; end local function prevent_write(event) local stanza = event.stanza; local xmlns_and_tag = stanza.tags[1].attr.xmlns..":"..stanza.tags[1].name; local store_name = namespaces[xmlns_and_tag]; if store_name then module:log("warn", "Preventing modification of %s store by %s", store_name, stanza.attr.from); event.origin.send(st.error_reply(stanza, "cancel", "not-allowed", store_name.." data is read-only")); return true; -- Block stanza end end for namespace in pairs(namespaces) do module:hook("iq-set/bare/"..namespace, prevent_write, 200); end