view mod_muc_block_pm/README.markdown @ 5404:1087f697c3f3

mod_http_oauth2: Strip unknown extra fields from client registration We shouldn't sign things we don't understand! RFC 7591 section-2 states: > The authorization server MUST ignore any client metadata sent by the > client that it does not understand (for instance, by silently removing > unknown metadata from the client's registration record during > processing). Prevents grandfathering in of unvalidated data that might become used later, especially since the 'additionalProperties' schema keyword was removed in 698fef74ce53
author Kim Alvefur <zash@zash.se>
date Tue, 02 May 2023 16:23:40 +0200
parents afedc2430b0d
children c7e532ac6bf7
line wrap: on
line source

---
summary: Prevent unaffiliated MUC participants from sending PMs
---

# Introduction

This module prevents unaffiliated users from sending private messages in
chat rooms, unless someone with an affiliation (member, admin etc)
messages them first.

# Configuration

The module doesn't have any options, just load it onto a MUC component.

``` lua
Component "muc"
modules_enabled = {
    "muc_block_pm";
}
```

# Compatibility

    Branch State
  -------- -----------------
       0.9 Works
      0.10 Should work
      0.11 Should work