[Pidgin] #15879: wrong "iq" detected during login

Pidgin trac at pidgin.im
Thu Jan 30 18:31:38 EST 2014


#15879: wrong "iq" detected during login
---------------------------------+---------------------
 Reporter:  arisia               |       Owner:  deryni
     Type:  defect               |      Status:  new
Milestone:                       |   Component:  XMPP
  Version:  2.10.8               |  Resolution:
 Keywords:  facebook connect iq  |
---------------------------------+---------------------

Comment (by deryni):

 The hacky plugin attached to this ticket does exactly that sort of
 workaround. The comment (and email) by xnyhps indicates a workaround that
 leaves the security change intact but attempts to be maximally compatible.

 It is a shame that, pidgin included, so few clients were checking this
 stuff correctly in the past and that servers got away with being broken
 for so long but fixing them is always better than working around them.
 Especially working around breakage as extensive as that which facebook
 exhibits.

 That being said if xnyhps's suggestion is considered reasonably and secure
 it is likely that it will be implemented to cover these cases.

-- 
Ticket URL: <https://developer.pidgin.im/ticket/15879#comment:26>
Pidgin <https://pidgin.im>
Pidgin


More information about the Tracker mailing list