sends vcards to anyone

Adrian Ulrich slack at
Tue Jan 29 20:53:58 UTC 2008

While writing a VCard-Plugin it came to my attention that djabberd sends out vcards
to anyone (no subscription needed at all).

While this might be acceptable for an 'inhouse' server, it's a pretty big issue for a public jabber server.

Is this a bug or a feature?

I've patched to run 'run_hook_chain(phase => "RosterLoadItem")', so it will only send
out vcards to 'authorized' contacts. I can post the patch if this it IS a bug ;-)


More information about the Djabberd mailing list