Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reject non-secure WebSocket or BOSH endpoints #3548

Merged
merged 1 commit into from
Nov 22, 2024

Commits on Nov 21, 2024

  1. Reject non-secure WebSocket or BOSH endpoints

    When discovering endpoints using XEP-0156, the server admin can list any
    kind of URL, but we want to use only secure ones using TLS.  In order to
    achieve that, we filter out the lists before using the first one
    available.
    
    This was causing connection to fail with the step.im server, which
    exposes in order ws:, wss: and http:, and we were previously using only
    the first and third ones, instead of the second like we should.
    
    Should fix the issue reported by @vnpower at
    https://misskey.pm/notes/a0v0aaw0tbknyojk
    linkmauve committed Nov 21, 2024
    Configuration menu
    Copy the full SHA
    f4afe95 View commit details
    Browse the repository at this point in the history