Openfire (master)

• 

  Guus der Kinderen 29 Oct 2020 543e06b0f0df373d879d2008118a8bfe85a4fc52

  OF-2112: Explicity discard S2S-outbound stanzas without a from attribute
  Stanzas that originate from clients _always_ have a 'from' attribute (as that attribute value is set
  overwritten by Openfire upon receiving the stanza, to prevent abuse where a user tries to impersonate
  someone else). That means that, if we're processing a stanza without a 'from' attribute, that the
  stanza is very likely to originate from Openfire's code. If we have code that generates a stanza
  without a 'from' address but addressed to a remote domain, this simply is a bug that we should very
  verbosely warn about.

  • xmppserver/src/main/java/org/jivesoftware/openfire/IQRouter.java (version 543e06b0f0df373d879d2008118a8bfe85a4fc52)
• 

  Nikola <nikola@feinfone.com> 29 Oct 2020 8c0cc9cefc685aba2ee551e976e6a43497710420

  Fixed NPL when trying to route an IQ without a from attribute

  • xmppserver/src/main/java/org/jivesoftware/openfire/IQRouter.java (version 8c0cc9cefc685aba2ee551e976e6a43497710420)