[Bug 28503] New: Properly validate JIDs with Nameprep, Nodeprep and Resourceprep profiles of Stringprep

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=28503

           Summary: Properly validate JIDs with Nameprep, Nodeprep and
                    Resourceprep profiles of Stringprep
           Product: Wocky
           Version: unspecified
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: General
        AssignedTo: telepathy-bugs at lists.freedesktop.org
        ReportedBy: will.thompson at collabora.co.uk
         QAContact: telepathy-bugs at lists.freedesktop.org


Currently Wocky does really minimal validation and normalization of JIDs:

• the name part is checked for any of: "&'/:<>@
• the domain part is checked for being non-empty
• the resource part is not checked for anything (which is right!)

and then all three are lowercased.

XMPP Core §3.2–4 <http://xmpp.org/rfcs/rfc3920.html#addressing-domain> says
that clients SHOULD apply these profiles before comparing JIDs (so we're not
actively violating it). But we probably should anyway.

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.