summary refs log tree commit diff
path: root/synapse/rest/client
diff options
context:
space:
mode:
authorAndrew Morgan <andrew@amorgan.xyz>2020-03-23 17:03:12 +0000
committerAndrew Morgan <andrew@amorgan.xyz>2020-03-23 17:03:12 +0000
commit35b1d7816baeb9949cf31798cc28bd16043f92fd (patch)
tree5713b95a40ff4b722461d59f620ea52b90ed46e7 /synapse/rest/client
parentBackgroud update to clean out rooms from current state (#6802) (diff)
parentMSC2260: Block direct sends of m.room.aliases events (#6794) (diff)
downloadsynapse-35b1d7816baeb9949cf31798cc28bd16043f92fd.tar.xz
MSC2260: Block direct sends of m.room.aliases events (#6794)
* commit '184303b86':
  MSC2260: Block direct sends of m.room.aliases events (#6794)
Diffstat (limited to 'synapse/rest/client')
-rw-r--r--synapse/rest/client/v1/room.py12
1 files changed, 12 insertions, 0 deletions
diff --git a/synapse/rest/client/v1/room.py b/synapse/rest/client/v1/room.py
index 69e13fbc11..976ec6a4f1 100644
--- a/synapse/rest/client/v1/room.py
+++ b/synapse/rest/client/v1/room.py
@@ -184,6 +184,12 @@ class RoomStateEventRestServlet(TransactionRestServlet):
 
         content = parse_json_object_from_request(request)
 
+        if event_type == EventTypes.Aliases:
+            # MSC2260
+            raise SynapseError(
+                400, "Cannot send m.room.aliases events via /rooms/{room_id}/state"
+            )
+
         event_dict = {
             "type": event_type,
             "content": content,
@@ -231,6 +237,12 @@ class RoomSendEventRestServlet(TransactionRestServlet):
         requester = await self.auth.get_user_by_req(request, allow_guest=True)
         content = parse_json_object_from_request(request)
 
+        if event_type == EventTypes.Aliases:
+            # MSC2260
+            raise SynapseError(
+                400, "Cannot send m.room.aliases events via /rooms/{room_id}/send"
+            )
+
         event_dict = {
             "type": event_type,
             "content": content,