id

93

publisher

goffi@goffi.org/d08fc2c8-30c5-4081-bff7-2f0f733436e8

title
change id generation
reporter
Goffi
created
15/07/2015, 15:34
updated
15/07/2015, 15:34
labels
Backend
type
bug
status
queued
priority
normal
milestone
0.7
severity
major
body

stanzas id are predictable, which is a bad practice (an attacker can try to answer a stanza by guessing its id). random ids should be used, and a patch should be sent upstream (in Twisted).

comments_uri
xmpp:pubsub.goffi.org?;node=urn%3Axmpp%3Amicroblog%3A0%3Acomments%2Forg.salut-a-toi.tickets%3A0_93

You are not logged. You need to log in to comment.