Changeset

7739:0356216c474c

core.stanza_router: Require 'id' attribute on iq stanzas (fixes #785)
author Kim Alvefur <zash@zash.se>
date Fri, 25 Nov 2016 05:06:13 +0100
parents 7738:0647b821e00a
children 7740:26a7186a40c6
files core/stanza_router.lua
diffstat 1 files changed, 3 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/core/stanza_router.lua	Thu Nov 24 14:18:25 2016 +0100
+++ b/core/stanza_router.lua	Fri Nov 25 05:06:13 2016 +0100
@@ -70,6 +70,9 @@
 			if not iq_types[st_type] or ((st_type == "set" or st_type == "get") and (#stanza.tags ~= 1)) then
 				origin.send(st.error_reply(stanza, "modify", "bad-request", "Invalid IQ type or incorrect number of children"));
 				return;
+			elseif not stanza.attr.id then
+				origin.send(st.error_reply(stanza, "modify", "bad-request", "Missing required 'id' attribute"));
+				return;
 			end
 		end