Mercurial > prosody-modules
diff mod_rest/mod_rest.lua @ 3807:b0449faca52b
mod_rest: Whitelist top level attributes in callback
Already done in HTTP sending endpoint.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Wed, 01 Jan 2020 10:59:24 +0100 |
| parents | c0caee8f54bb |
| children | 91ff86fc3b20 |
line wrap: on
line diff
--- a/mod_rest/mod_rest.lua Wed Jan 01 10:59:04 2020 +0100 +++ b/mod_rest/mod_rest.lua Wed Jan 01 10:59:24 2020 +0100 @@ -175,7 +175,13 @@ elseif parsed.name ~= stanza.name then module:log("warn", "REST callback responded with the wrong stanza type, got %s but expected %s", parsed.name, stanza.name); else - parsed.attr.to, parsed.attr.from = stanza.attr.from, stanza.attr.to; + parsed.attr = { + from = stanza.attr.to, + to = stanza.attr.from, + id = parsed.attr.id or id.medium(); + type = parsed.attr.type, + ["xml:lang"] = parsed.attr["xml:lang"], + }; if parsed.name == "iq" or parsed.attr.type == "error" then parsed.attr.id = stanza.attr.id; end