hbons/SparkleShare — pull request #368 by nicolaslazartekaqui (2011-10-11 15:28:30+00:00)
Title: Making use the IRC more safe

Implemented rules was to make use of the IRC protocol safer.
From a study, I realized that it is possible to an external agent Sparkleshare access the server and the IRC channels of projects, an attacker can perform a DoS on the clients.

One way to avoid this type of attack is making the invisible channel, which has already been done in a commit.
Another solution is to use keys to access the channel. I've implemented this using the configuration file Sparkleshare.

To set a password, just add a new element node in the project:
123

Thus is set the password, but this configuration should be applied to all users of the project, if a user does not set, it will not be able to access the IRC channel.
If all users choose not to define the key, then the channel does not use keys to access. The key is defined on the server by the first user to connect to IRC server.

Also created a configuration that allows the user to allow or disallow access to channels that has no password set, as if an alert that the channel is not secure and if he wants to continue or not.

I also use the configuration file to determine whether or not enough access to add the element node in the project:
yes
or
in

If you do not configure this setting will be considered that the access is allowed, this way normal use of Sparkleshare is not changed.