Bug 28503

Summary: Properly validate JIDs with Nameprep, Nodeprep and Resourceprep profiles of Stringprep
Product: Wocky Reporter: Will Thompson <will>
Component: GeneralAssignee: Telepathy bugs list <telepathy-bugs>
Status: NEW --- QA Contact: Telepathy bugs list <telepathy-bugs>
Severity: normal    
Priority: medium    
Version: unspecified   
Hardware: Other   
OS: All   
Whiteboard:
i915 platform: i915 features:

Description Will Thompson 2010-06-11 07:35:53 UTC 
Currently Wocky does really minimal validation and normalization of JIDs:

• the name part is checked for any of: "&'/:<>@
• the domain part is checked for being non-empty
• the resource part is not checked for anything (which is right!)

and then all three are lowercased.

XMPP Core §3.2–4 <http://xmpp.org/rfcs/rfc3920.html#addressing-domain> says that clients SHOULD apply these profiles before comparing JIDs (so we're not actively violating it). But we probably should anyway.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.