1
0
Fork 0
mirror of https://github.com/vanitasvitae/Smack.git synced 2024-06-23 20:04:51 +02:00
Smack/core/src/test/java/org/jivesoftware/smack
Lars Noschinski 6c7296a37b Add and use IQReplyFilter (SMACK-533)
In the absence of checks on the from address, it is possible for other
clients to fake an answer to an IQ request.

This commit adds an IQReplyFilter, which drops all packets which are not
a valid reply to an IQ request. In particular, it checks for packet id,
from address and packet type.

Most(?) places waiting for a reply to an IQ request are converted to use
the IQReplyFilter.

For a discussion of the issues, see the thread "Spoofing of iq ids and
misbehaving servers" from 2014-01 on the jdev@jabber.org mailing list
and following discussion in February and March.
2014-03-07 16:13:07 +01:00
..
filters Add and use IQReplyFilter (SMACK-533) 2014-03-07 16:13:07 +01:00
packet Normalize newlines to '\n' 2014-02-17 23:58:40 +01:00
parsing Activate checkstyle and add missing license headers 2014-02-17 20:09:55 +01:00
provider Move EntityCaps and Bookmarks API in correct package 2014-02-18 10:24:59 +01:00
test/util Substitute MXParser with a call to XmlPullParserFactory 2014-02-20 13:48:36 +01:00
util Activate checkstyle and add missing license headers 2014-02-17 20:09:55 +01:00
ChatConnectionTest.java Normalize newlines to '\n' 2014-02-17 23:58:40 +01:00
DefaultRosterStoreTest.java Activate checkstyle and add missing license headers 2014-02-17 20:09:55 +01:00
DummyConnection.java Activate checkstyle and add missing license headers 2014-02-17 20:09:55 +01:00
PacketCollectorTest.java Improve packet send and result collecting API 2014-02-18 19:39:47 +01:00
RosterTest.java Substitute MXParser with a call to XmlPullParserFactory 2014-02-20 13:48:36 +01:00
RosterVersioningTest.java Activate checkstyle and add missing license headers 2014-02-17 20:09:55 +01:00
SmackConfigurationTest.java Improve packet send and result collecting API 2014-02-18 19:39:47 +01:00
ThreadedDummyConnection.java Activate checkstyle and add missing license headers 2014-02-17 20:09:55 +01:00