plugin XEP-0166: reject session creation is session ID is empty

2023-08-16 18:28:32 +02:00 · 2023-08-16 18:28:32 +02:00 · 71cfdccb5b
commit 71cfdccb5b
parent 0e6dd6a8de
1 changed files with 4 additions and 0 deletions
--- a/libervia/backend/plugins/plugin_xep_0166/init.py
+++ b/libervia/backend/plugins/plugin_xep_0166/init.py
@ -184,6 +184,10 @@ class XEP_0166:
        @raise ValueError: If the provided role is neither initiator nor responder.
        """
        # TODO: session cleaning after timeout ?
+
+        if not sid:
+            raise exceptions.DataError("Empty session ID is not allowed")
+
        if role not in [XEP_0166.ROLE_INITIATOR, XEP_0166.ROLE_RESPONDER]:
            raise ValueError(f"Invalid role {role}. Expected initiator or responder.")