comparison libpurple/protocols/jabber/iq.c @ 17884:feac55968392

Now all ad-hoc commands have to be sent through jabber_adhoc_execute to be properly executed (including the form steps). This cleans up the code a bit, and avoids DOS attacks by flooding the client with malicious ad-hoc command forms that were not requested.
author Andreas Monitzer <pidgin@monitzer.com>
date Mon, 25 Jun 2007 20:07:31 +0000
parents 43df07968000
children 5c1ed6296b56
comparison
equal deleted inserted replaced
17883:9a19c46adf66 17884:feac55968392
290 if(xmlnode_get_child_with_namespace(packet, "new-mail", "google:mail:notify")) { 290 if(xmlnode_get_child_with_namespace(packet, "new-mail", "google:mail:notify")) {
291 jabber_gmail_poke(js, packet); 291 jabber_gmail_poke(js, packet);
292 return; 292 return;
293 } 293 }
294 294
295 if(xmlnode_get_child_with_namespace(packet, "command", "http://jabber.org/protocol/commands")) {
296 jabber_adhoc_parse(js, packet);
297 return;
298 }
299
300 purple_debug_info("jabber", "jabber_iq_parse\n"); 295 purple_debug_info("jabber", "jabber_iq_parse\n");
301 296
302 if(xmlnode_get_child_with_namespace(packet, "ping", "http://www.xmpp.org/extensions/xep-0199.html#ns")) { 297 if(xmlnode_get_child_with_namespace(packet, "ping", "http://www.xmpp.org/extensions/xep-0199.html#ns")) {
303 jabber_ping_parse(js, packet); 298 jabber_ping_parse(js, packet);
304 return; 299 return;