File

mod_sift/README.markdown @ 5548:fd3c12c40cd9

mod_http_oauth2: Disable CORS for authorization endpoint Per recommendation in draft-ietf-oauth-security-topics-23 Hopefully it is enough to return an error status, since mod_http will add CORS headers from a handler with higher priority, even for OPTIONS.
author Kim Alvefur <zash@zash.se>
date Fri, 16 Jun 2023 00:05:57 +0200
parent 2138:d3231a4d6a60
line wrap: on
line source

---
labels:
- 'Stage-Alpha'
summary: 'XEP-0273: Stanza Interception and Filtering Technology'
...

Introduction
============

[SIFT][XEP-0273] is a technology to allow clients to filter incoming
traffic on the server. This helps save bandwidth, etc.

Compatibility
=============

  ----- -------
  0.7   Works
  ----- -------

Quirks
======

This implementation is a work in progress.

-   Stanzas to full JIDs get sifted correctly
-   Stanzas to bare JIDs are currently allowed/disallowed for all
    resources as a whole, and not for individual resources
-   Presence is only sent to available resources, and probes are not
    sent for unavailable reasources
-   This module currently does not interact with offline messages
    (filtered messages are dropped with an error reply)
-   Not tested with privacy lists