Poll WIP (#231):

* backend security: avoid spoofing polls

prosody-modules/mod_muc_poll/mod_muc_poll.lua

@@ -19,6 +19,7 @@ local xmlns_poll = module:require("constants").xmlns_poll;
 local send_form = module:require("form").send_form;
 local process_form = module:require("form").process_form;
 local handle_groupchat = module:require("poll").handle_groupchat;
+local remove_specific_tags_from_groupchat = module:require("message").remove_specific_tags_from_groupchat
 local room_restored = module:require("poll").room_restored;
 
 -- new poll creation, get form
@@ -81,6 +82,10 @@ end);
 -- Note: we use a high priority, so it will be handled before the slow mode.
 module:hook("muc-occupant-groupchat", handle_groupchat, 1000);
 
+-- security check: we must remove all specific tags, to be sure nobody tries to spoof polls!
+module:hook("muc-occupant-groupchat", remove_specific_tags_from_groupchat, 1000);
+
+
 -- when a room is restored (after a server restart for example),
 -- we must resume any current poll
 module:hook("muc-room-restored", room_restored);