From d6705362a2f9a25e823ce1b513e99ad2532bad19 Mon Sep 17 00:00:00 2001
From: Michael Vetter <jubalh@iodoru.org>
Date: Fri, 6 Mar 2026 12:36:53 +0100
Subject: [PATCH] fix: Only allow /msg with valid JIDs

Only allow to message someone who has a nick in roster or when we pass a
user JID.
Otherwise notify the user.
---
 src/command/cmd_funcs.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/command/cmd_funcs.c b/src/command/cmd_funcs.c
index d8fb6b4c..7f574aff 100644
--- a/src/command/cmd_funcs.c
+++ b/src/command/cmd_funcs.c
@@ -2155,7 +2155,11 @@ cmd_msg(ProfWin* window, const char* const command, gchar** args)
             barejid = usr;
         }
 
-        _cmd_msg_chatwin(barejid, msg);
+        if (jid_is_valid_user_jid(barejid)) {
+            _cmd_msg_chatwin(barejid, msg);
+        } else {
+            cons_show_error("Not a contact or valid JID: %s", barejid);
+        }
 
         return TRUE;
     }