[jdev] Necessity of stringprep support for the client

Kevin Smith kevin at kismith.co.uk
Thu Aug 16 08:33:23 UTC 2012


On Thu, Aug 16, 2012 at 9:23 AM, Sergey Dobrov <binary at jrudevels.org> wrote:
> Can XMPP work in conformity with XMPP Core if it can't do stringprep?
> The question has arisen because of js that doesn't have a possibility to
> do stringprep transformations and it's hard to do in script because we
> will need to download huge tables to the client.

Without stringprep, various things aren't going to work - at its
worst, you could be sending illegal data to the server and getting
disconnected.

More subtle and much harder to debug is that you may be comparing JIDs
using string comparisons that are the same JID in a different
representation.

/K


More information about the JDev mailing list