[jdev] Necessity of stringprep support for the client
Kevin Smith
kevin at kismith.co.uk
Thu Aug 16 08:33:23 UTC 2012
On Thu, Aug 16, 2012 at 9:23 AM, Sergey Dobrov <binary at jrudevels.org> wrote:
> Can XMPP work in conformity with XMPP Core if it can't do stringprep?
> The question has arisen because of js that doesn't have a possibility to
> do stringprep transformations and it's hard to do in script because we
> will need to download huge tables to the client.
Without stringprep, various things aren't going to work - at its
worst, you could be sending illegal data to the server and getting
disconnected.
More subtle and much harder to debug is that you may be comparing JIDs
using string comparisons that are the same JID in a different
representation.
/K
More information about the JDev
mailing list