devs/cproof
1
2
Fork 1
Code Issues 43 Pull Requests 9 Actions Packages Projects 1 Releases Wiki Activity

fix(xmpp): obfuscate client identity in protocol exchanges
All checks were successful
CI Code / Check spelling (pull_request) Successful in 12s
Details
CI Code / Check coding style (pull_request) Successful in 21s
Details
CI Code / Code Coverage (pull_request) Successful in 3m33s
Details
CI Code / Linux (debian) (pull_request) Successful in 5m12s
Details
CI Code / Linux (ubuntu) (pull_request) Successful in 5m20s
Details
CI Code / Linux (arch) (pull_request) Successful in 7m16s
Details

Browse Source 
Modify version responses to return a generic client name and omit
version strings. Drop the "profanity." prefix from dynamically
generated JID resources. Clear the XEP-0115 capabilities node URI to
prevent service discovery fingerprinting. These adjustments reduce the
client's attack surface by minimizing identifiable metadata.
This commit is contained in:
Jabber Developer
2026-07-09 15:23:16 +00:00
parent 60e088ac3c
commit e7c847f8dc
14 changed files with 89 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/xmpp/iq.c
View File

@@ -1681,7 +1681,7 @@ _version_get_handler(xmpp_stanza_t* const stanza)
xmpp_stanza_t* name = xmpp_stanza_new(ctx);
xmpp_stanza_set_name(name, "name");
xmpp_stanza_t* name_txt = xmpp_stanza_new(ctx);
xmpp_stanza_set_text(name_txt, is_custom_client ? client : "Profanity");
xmpp_stanza_set_text(name_txt, is_custom_client ? client : "Pidgin");
xmpp_stanza_add_child(name, name_txt);
xmpp_stanza_add_child(query, name);
bool include_os = prefs_get_boolean(PREF_REVEAL_OS) && !is_custom_client;
@@ -1690,7 +1690,7 @@ _version_get_handler(xmpp_stanza_t* const stanza)
xmpp_stanza_t* version = xmpp_stanza_new(ctx);
xmpp_stanza_set_name(version, "version");
xmpp_stanza_t* version_txt = xmpp_stanza_new(ctx);
auto_gchar gchar* prof_version = prof_get_version();
auto_gchar gchar* prof_version = g_strdup("");
if (!is_custom_client) {
xmpp_stanza_set_text(version_txt, prof_version);