Remove Flash support

Description

Openfire’s code seems to support Flash clients. Flash is an ancient technology, that has no use anymore. Ignite’s Sparkweb and XIFF projects are long dead. In a quick test, I couldn’t even get the crossdomain.xml file to work.

Spark-specific code in Openfire:

  • adds a bit of complexity (and thus, maintenance)

  • raises security concerns

  • specifically allows the null character to be parsed in XML, which according to the XMPP specification is not allowed.

Support for Flash should be dropped.

Environment

None

Activity

Show:
Fixed

Details

Assignee

Reporter

Fix versions

Priority

Created November 2, 2020 at 6:51 PM
Updated July 29, 2022 at 6:34 PM
Resolved November 14, 2020 at 1:23 PM

Flag notifications