Mercurial > prosody-modules
view mod_broadcast/README.markdown @ 5956:97375a78d2b5
mod_http_oauth2: Reject URLs with 'userinfo' part (thanks mimi89999)
The LuaSocket parser supports these but they're deprecated without
replacement by RFC 3986
> Use of the format "user:password" in the userinfo field is deprecated
Allowing it in OAuth2 URLs is probably bad from a security perspective.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Thu, 29 Aug 2024 16:02:46 +0200 |
parents | 34fb3d239ac1 |
children |
line wrap: on
line source
--- labels: - 'Stage-Stable' summary: Broadcast a message to online users ... Introduction ============ This module largely duplicates the functionality of the standard mod\_announce that is included with Prosody. It was developed for compatibility with some clients (e.g. iChat) that do not support ad-hoc commands or sending to JIDs with the format 'example.com/announce/online'. It may also be useful in other specific cases. Configuration ============= Component "broadcast@example.com" "broadcast" By default, only server admins are allowed to post to this address. You can override this, by specifying the 'broadcast\_senders' option: Component "broadcast@example.com" "broadcast" broadcast_senders = { "user1@example.com", "user2@example.com" } Compatibility ============= ------ ------- 0.9 Works 0.10 Works trunk Doesn't work (uses is_admin) ------ -------