VCard.pm sends vcards to anyone
Adrian Ulrich
slack at blinkenlights.ch
Tue Jan 29 20:53:58 UTC 2008
While writing a VCard-Plugin it came to my attention that djabberd sends out vcards
to anyone (no subscription needed at all).
While this might be acceptable for an 'inhouse' server, it's a pretty big issue for a public jabber server.
Is this a bug or a feature?
I've patched VCard.pm to run 'run_hook_chain(phase => "RosterLoadItem")', so it will only send
out vcards to 'authorized' contacts. I can post the patch if this it IS a bug ;-)
Regards,
Adrian
More information about the Djabberd
mailing list