fix(xmpp): obfuscate client identity in protocol exchanges
Some checks failed
CI Code / Check spelling (pull_request) Successful in 16s
CI Code / Check coding style (pull_request) Successful in 25s
CI Code / Code Coverage (pull_request) Failing after 1m8s
CI Code / Linux (debian) (pull_request) Failing after 3m14s
CI Code / Linux (arch) (pull_request) Failing after 4m16s
CI Code / Linux (ubuntu) (pull_request) Failing after 7m42s
Some checks failed
CI Code / Check spelling (pull_request) Successful in 16s
CI Code / Check coding style (pull_request) Successful in 25s
CI Code / Code Coverage (pull_request) Failing after 1m8s
CI Code / Linux (debian) (pull_request) Failing after 3m14s
CI Code / Linux (arch) (pull_request) Failing after 4m16s
CI Code / Linux (ubuntu) (pull_request) Failing after 7m42s
Modify version responses to return a generic client name and omit version strings. Drop the "profanity." prefix from dynamically generated JID resources. Clear the XEP-0115 capabilities node URI to prevent service discovery fingerprinting. These adjustments reduce the client's attack surface by minimizing identifiable metadata.
This commit is contained in:
@@ -280,9 +280,9 @@ jid_fulljid_or_barejid(Jid* jid)
|
||||
gchar*
|
||||
jid_random_resource(void)
|
||||
{
|
||||
auto_gchar gchar* rand = get_random_string(4);
|
||||
auto_gchar gchar* rand = get_random_string(5);
|
||||
|
||||
gchar* result = g_strdup_printf("profanity.%s", rand);
|
||||
gchar* result = g_strdup_printf("%s", rand);
|
||||
|
||||
return result;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user