Neustradamus
commented
1 year ago <message id="MESSAGEID" from="contact@domain2.tld" xml:lang="en" to="me@domain.tld">
<no-store xmlns="urn:xmpp:hints"/>
<x xmlns="jabber:x:oob">
<url>https://domain2.tld:5443/captcha/MESSAGEID</url>
</x>
<captcha xmlns="urn:xmpp:captcha">
<x xmlns="jabber:x:data" type="form">
<field var="FORM_TYPE" type="hidden">
<value>urn:xmpp:captcha</value>
</field>
<field label="Attribute 'to' of stanza that triggered challenge" var="from" type="hidden">
<value>me@domain.tld</value>
</field>
<field label="Challenge ID" var="challenge" type="hidden">
<required/>
<value>MESSAGEID</value>
</field>
<field label="Stanza ID" var="sid" type="hidden"/>
<field label="Enter the text you see" var="ocr" type="text-single">
<media xmlns="urn:xmpp:media-element">
<uri type="image/png">cid:sha1+IMAGEID@bob.xmpp.org</uri>
</media>
<required/>
</field>
</x>
</captcha>
<data xmlns="urn:xmpp:bob" type="image/png" max-age="0" cid="sha1+IMAGEID@bob.xmpp.org">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</data>
<body xml:lang="en">Your subscription request and/or messages to contact@domain2.tld have been blocked. To unblock your subscription request, visit https://domain2.tld:5443/captcha/MESSAGEID</body>
</message>
<iq id="IQMESSAGE" type="set" to="contact@domain2.tld">
<captcha xmlns="urn:xmpp:captcha">
<x xmlns="jabber:x:data" type="form">
<field var="FORM_TYPE" type="hidden">
<value>urn:xmpp:captcha</value>
</field>
<field var="from" type="hidden">
<value>me@domain.tld</value>
</field>
<field var="challenge" type="hidden">
<value>MESSAGEID</value>
</field>
<field var="sid" type="hidden"/>
<field var="ocr" type="text-single">
<value>XXXXXX</value>
</field>
</x>
</captcha>
</iq>
<iq id="IQMESSAGE" from="contact@domain2.tld" xml:lang="en" type="result" to="me@domain.tld/Psi+"/>XXXXXX is the entered showed CAPTCHA but it does not work.
We can receive a CAPTCHA request, a "Dialog" window arrives but no information for what.
1/ It is a CAPTCHA? (yes but it not specified) 2/ The XMPP Account is not specified 3/ The contact or service who sends this request is not specified too
Screenshot: