view mod_xmllang_check/mod_xmllang_check.lua @ 6540:7cb25e7d945d

mod_muc_mav: Prevent JIDs leaking to occupants who are not allowed The occupant-id is always there so the list is still useful to them.
author Stephen Paul Weber <singpolyma@singpolyma.net>
date Mon, 18 May 2026 10:23:58 -0500
parents de3dc4297035
children
line wrap: on
line source

-- Strip invalid xml:lang values from outgoing s2s stanzas.
--
-- xmpplang.lib.lua must return a function that validates xml:lang strings.
local is_valid_xml_lang = module:require "xmpplang";

local function strip_invalid_xml_lang(element)
	local xml_lang = element.attr["xml:lang"];
	if xml_lang ~= nil and not is_valid_xml_lang(xml_lang, element) then
		element.attr["xml:lang"] = nil;
	end

	for child in element:childtags() do
		strip_invalid_xml_lang(child);
	end
end

module:hook("route/remote", function (event)
	-- FIXME should we clone the stanza vs modifying in place?
	-- FIXME should we replace recursively vs checking a specific subset of elements?
	-- FIXME instead of outgoing, should we clean incoming stanzas from everywhere, so invalid xml:lang stanzas are never sent or stored?
	strip_invalid_xml_lang(event.stanza);
end, 500);