Skip to content

OTR leaks cleartext when using XHTML

    \<message from='xxxxxxxxxx' to='xxxxxxxxxxxx' xml:lang='de' type='chat' id='386'>
    \<body>asd\</body>
    \<html xmlns='http://jabber.org/protocol/xhtml-im'>
    \<body xmlns='http://www.w3.org/1999/xhtml'>
    \<p>
    \<strong>asd\</strong>
    \</p>
    \</body>
    \<body xmlns='http://www.w3.org/1999/xhtml'>?OTR:AAIDAAAAAAEAAAABAAAAwKBYzRnXBpmvA2WtMapToeCp1aCqWp8Q+vyblAA7R/+meZP0i6if3pLIByBYzo67+B/5WxfCqfL+LsHvgQ4EjVAdyX29DLxhPHLCTxodAHSooyDdZGq9X7aV7SMQNukAUEnmqEynslW5eeTxsPRWYt8kOhPiczx/36W89sabeySnWXMwHGD8Hout2sBZW6uOStjW9E44PkVOa9ertLYj1pCK5uN6uqW2xOCjgsRaFdihGUcndQa99UEQK9Ifa3x2XgAAAAAAAAAEAAAATthfI2LuhtECdNIRoks586yu91Cmr+Vclb2oYvCOYna8Lj/UR2NGnyutdvQwaPGyMpKOUpo9J0BmpDRNpITeQNgRehYmT+NNAgNpdeqbdw/4m6k75Yp3lXddsE+DBgCcXGq+AAAAPJIKTim0Sq5pJ40FN3ycXGUgsFhcsWPjXCjubSpYwQqS5Fm69Wuhr4u6EiVKDoElqjvEZkrK6anvb656sw==.\</body>
    \</html>
    \<active xmlns='http://jabber.org/protocol/chatstates'/>
    \<request xmlns='urn:xmpp:receipts'/>
    \<thread>NNJdLcCElUpAPnWLvRiekJIBxAiJUdAc\</thread>
    \<private xmlns='urn:xmpp:carbons:2'/>
    \<no-permanent-store xmlns='urn:xmpp:hints'/>
    \<no-copy xmlns='urn:xmpp:hints'/>
    \</message>