prosody
87dd8639f08f
DEPENDS

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Annotate

DEPENDS @ 13843:87dd8639f08f 13.0

mod_invites_register: Stricter validation of registration events This fixes two problems: 1) Account invites that were created with a specific username were not in fact restricted to that username. 2) Password reset invites were not restricted to resetting passwords, but could be used to create an arbitrary new account if the client or registration frontend (e.g. mod_invites_register_web) doesn't handle/enforce the username. This new validation ensures that registrations and resets are always for the username specified in the invitation.
author Matthew Wild <mwild1@gmail.com>
date Thu, 10 Apr 2025 16:07:32 +0100
parent 8454:90962ef41bf3
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
5406
9903a03b7b3e DEPENDS: Update (LuaSec now has a rock) and add link to /doc/depends
Matthew Wild <mwild1@gmail.com>
parents: 4914
diff changeset
1
9903a03b7b3e DEPENDS: Update (LuaSec now has a rock) and add link to /doc/depends
Matthew Wild <mwild1@gmail.com>
parents: 4914
diff changeset
2 For full information on our dependencies, version requirements, and
8454
90962ef41bf3 DEPENDS: Change link to https
Kim Alvefur <zash@zash.se>
parents: 5406
diff changeset
3 where to find them, see https://prosody.im/doc/depends
5406
9903a03b7b3e DEPENDS: Update (LuaSec now has a rock) and add link to /doc/depends
Matthew Wild <mwild1@gmail.com>
parents: 4914
diff changeset
4
9903a03b7b3e DEPENDS: Update (LuaSec now has a rock) and add link to /doc/depends
Matthew Wild <mwild1@gmail.com>
parents: 4914
diff changeset
5 If you have luarocks available on your platform, install the following:
7
dcc5ac721c20 - Remove some debugging code
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
6
5406
9903a03b7b3e DEPENDS: Update (LuaSec now has a rock) and add link to /doc/depends
Matthew Wild <mwild1@gmail.com>
parents: 4914
diff changeset
7 - luaexpat
9903a03b7b3e DEPENDS: Update (LuaSec now has a rock) and add link to /doc/depends
Matthew Wild <mwild1@gmail.com>
parents: 4914
diff changeset
8 - luasocket
9903a03b7b3e DEPENDS: Update (LuaSec now has a rock) and add link to /doc/depends
Matthew Wild <mwild1@gmail.com>
parents: 4914
diff changeset
9 - luafilesystem
9903a03b7b3e DEPENDS: Update (LuaSec now has a rock) and add link to /doc/depends
Matthew Wild <mwild1@gmail.com>
parents: 4914
diff changeset
10 - luasec
7
dcc5ac721c20 - Remove some debugging code
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
11