Mercurial > prosody-modules

view mod_poke_strangers/README.markdown @ 5548:fd3c12c40cd9

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
mod_http_oauth2: Disable CORS for authorization endpoint Per recommendation in draft-ietf-oauth-security-topics-23 Hopefully it is enough to return an error status, since mod_http will add CORS headers from a handler with higher priority, even for OPTIONS.
author Kim Alvefur <zash@zash.se>
date Fri, 16 Jun 2023 00:05:57 +0200
parents 06faf7a149e3
children
line wrap: on
line source

---
labels:
- 'Stage-Alpha'
summary: 'Query the features and version of JIDs sending messages to contacts they are not subscribed to.'
...

Introduction
============

In order to build heuristics for which messages are spam, it is necessary to
log as many details as possible about the spammers. This module sends a
version and disco query whenever a message is received from a JID to a user it
is not subscribed to. The results are printed to Prosody's log file at the
'info' level. Queried full JIDs are not queried again until Prosody restarts.

The queries are sent regardless of whether the local user exists, so it does
not reveal if an account is active.

Compatibility
=============

  ----- -------
  0.9   Works
  ----- -------