# HG changeset patch # User Kim Alvefur # Date 1522013414 -7200 # Node ID 164da3186511eeee509a7d24ae1116c71541c2d6 # Parent 09e7fd8b16cd1726ef8c47adc7e1038f3e00b4ec mod_pep_plus: Validate items here too (thanks Link Mauve) diff -r 09e7fd8b16cd -r 164da3186511 plugins/mod_pep_plus.lua --- a/plugins/mod_pep_plus.lua Wed Mar 21 23:41:03 2018 +0100 +++ b/plugins/mod_pep_plus.lua Sun Mar 25 23:30:14 2018 +0200 @@ -34,6 +34,10 @@ services = data.services; end +function is_item_stanza(item) + return st.is_stanza(item) and item.attr.xmlns == xmlns_pubsub and item.name == "item"; +end + local function subscription_presence(username, recipient) local user_bare = jid_join(username, host); local recipient_bare = jid_bare(recipient); @@ -188,6 +192,7 @@ itemstore = simple_itemstore(username); broadcaster = get_broadcaster(username); + itemcheck = is_item_stanza; get_affiliation = function (jid) if jid_bare(jid) == user_bare then return "owner";