view mod_conversejs/templates/template.js @ 5404:1087f697c3f3

mod_http_oauth2: Strip unknown extra fields from client registration We shouldn't sign things we don't understand! RFC 7591 section-2 states: > The authorization server MUST ignore any client metadata sent by the > client that it does not understand (for instance, by silently removing > unknown metadata from the client's registration record during > processing). Prevents grandfathering in of unvalidated data that might become used later, especially since the 'additionalProperties' schema keyword was removed in 698fef74ce53
author Kim Alvefur <zash@zash.se>
date Tue, 02 May 2023 16:23:40 +0200
parents 13b065432bf2
children
line wrap: on
line source

if(typeof converse == 'undefined') {
	/*
	 * This shows the content of <noscript> if there's a problem
	 * loading converse.js for some reason
	 */
	var div = document.createElement("div");
	var noscript = document.getElementsByTagName("noscript")[0];
	div.innerHTML = noscript.innerText;
	document.body.appendChild(div);
} else {
	/*
	 * converse.js should have loaded, so we initialize it with
	 * the settings generated by Prosody. This uses sprintf-style
	 * formatting to insert the settigs as a JSON object.
	 */
	converse.initialize(%s);
}