jabber.developer2
5f39dd4939
XEP-0203 §4 (Delayed Delivery): Remote clients could inject <delay xmlns='urn:xmpp:delay'> elements with arbitrary timestamps, causing messages to appear at incorrect positions in chat history. The spec mandates checking the 'from' attribute to verify the delay was added by a trusted source. - stanza.c: add stanza_get_oldest_delay_from(stanza, from) that filters <delay>/<x> children by the 'from' attribute; refactor stanza_get_oldest_delay() to delegate with from=NULL. Add NULL-safety for tmp timestamp in comparison logic. - stanza.h: declare stanza_get_oldest_delay_from(). - message.c (_handle_chat): replace unfiltered stanza_get_delay() with trust-ordered fallback: our domain → sender domain → now. - message.c (_handle_groupchat): replace stanza_get_oldest_delay() with fallback: room bare JID → room domain → our domain → now. - message.c (_handle_muc_private_message): same pattern. MAM path deliberately unchanged — <delay> inside <forwarded> is already from our own server's archive. XEP-0359 §5 (Unique and Stable Stanza IDs): The <stanza-id> element was accepted without checking the 'by' attribute, allowing a remote client to inject forged archive IDs. - stanza.h: add STANZA_ATTR_BY define. - message.c (_handle_groupchat): only accept <stanza-id> when by == room bare JID. - message.c (_handle_chat): only accept <stanza-id> when by == our server domain.
CProof
CProof is a console based XMPP chat client based on Profanity.
See the Quick Start Guide for information on installing and using CProof.
Project
CProof enables you to communicate with privacy, freedom and comfort. Our open-source chat application delivers secure, end-to-end encrypted messaging (OTR, PGP, OMEMO, OX) built on the trusted XMPP protocol. With a decentralized design, you can connect directly or even host your own server, keeping your data in your hands. Whether you're chatting with friends or collaborating securely, CProof makes private communication simple, reliable, and truly yours.
Installation
Check our installation guide for detailed instructions.
How to contribute
See our Helping Out page for a concise summary of ways to help us.
Review the Contributing Guide and Code Overview pages for advanced technical details.
Getting help
Prior to asking questions, check our User Guide, then check out the FAQ.
If you are still having a problem then search the issue tracker.
As a last resort, feel free to write us on support@jabber.tech or create a new issue depending on what your problem is.
Links
Website
Feel free to visit our website: jabber.space.
You may also check the repository if you like, available on git.jabber.space/devs/profanity.
Plugins
Plugins repository: https://git.jabber.space/devs/cproof-plugins