VCard.pm sends vcards to anyone

Adrian Ulrich slack at blinkenlights.ch
Tue Jan 29 20:53:58 UTC 2008


While writing a VCard-Plugin it came to my attention that djabberd sends out vcards
to anyone (no subscription needed at all).

While this might be acceptable for an 'inhouse' server, it's a pretty big issue for a public jabber server.


Is this a bug or a feature?


I've patched VCard.pm to run 'run_hook_chain(phase => "RosterLoadItem")', so it will only send
out vcards to 'authorized' contacts. I can post the patch if this it IS a bug ;-)

Regards,
 Adrian


More information about the Djabberd mailing list