username/bouncer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: block PASS/USER/NICK from clients post-registration

Browse Source 
All three registration commands are now explicitly intercepted after
the client has authenticated. NICK gets a notice pointing to the
bouncer command; PASS and USER are silently dropped.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
user
2026-02-21 00:48:03 +01:00
parent ee2175f565
commit e6b1ce4c6d
1 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
src/bouncer/client.py
View File

@@ -112,13 +112,14 @@ class Client:
if msg.command == "QUIT": if msg.command == "QUIT":
return return
# Block direct NICK -- must go through /msg *bouncer NICK <network> <nick> # Block registration commands -- never forward to networks
if msg.command == "NICK": if msg.command in ("NICK", "PASS", "USER"):
self._send_msg(IRCMessage( if msg.command == "NICK":
command="NOTICE", self._send_msg(IRCMessage(
params=[self._nick, "Use /msg *bouncer NICK <network> <nick>"], command="NOTICE",
prefix="*bouncer!bouncer@bouncer", params=[self._nick, "Use /msg *bouncer NICK <network> <nick>"],
)) prefix="*bouncer!bouncer@bouncer",
))
return return
# Intercept bouncer control commands # Intercept bouncer control commands