# HG changeset patch # User Goffi # Date 1692203312 -7200 # Node ID 79ec7d7beef3b7bdb70856544fd1a2778aa00c64 # Parent 3f59a2b141ccd7eb21f12b7d63ca3cc98cd2c08f plugin XEP-0166: reject session creation is session ID is empty diff -r 3f59a2b141cc -r 79ec7d7beef3 libervia/backend/plugins/plugin_xep_0166/__init__.py --- a/libervia/backend/plugins/plugin_xep_0166/__init__.py Wed Aug 09 00:48:11 2023 +0200 +++ b/libervia/backend/plugins/plugin_xep_0166/__init__.py Wed Aug 16 18:28:32 2023 +0200 @@ -184,6 +184,10 @@ @raise ValueError: If the provided role is neither initiator nor responder. """ # TODO: session cleaning after timeout ? + + if not sid: + raise exceptions.DataError("Empty session ID is not allowed") + if role not in [XEP_0166.ROLE_INITIATOR, XEP_0166.ROLE_RESPONDER]: raise ValueError(f"Invalid role {role}. Expected initiator or responder.")