diff options
| author | Kegsay <kegsay@gmail.com> | 2015-10-01 14:44:39 +0100 |
|---|---|---|
| committer | Kegsay <kegsay@gmail.com> | 2015-10-01 14:44:39 +0100 |
| commit | b43930d4c9479973fb7225818e2e51bec022c4e6 (patch) | |
| tree | e7a468daa9cd6253cc0d2e56b42168eaffbad609 | |
| parent | Don't change cwd in synctl (diff) | |
| parent | Validate the receipt type before passing it on to the receipt handler (diff) | |
| download | synapse-b43930d4c9479973fb7225818e2e51bec022c4e6.tar.xz | |
Merge pull request #291 from matrix-org/receipt-validation
Validate the receipt type before passing it on to the receipt handler
| -rw-r--r-- | synapse/rest/client/v2_alpha/receipts.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/synapse/rest/client/v2_alpha/receipts.py b/synapse/rest/client/v2_alpha/receipts.py index 52e99f54d5..b107b7ce17 100644 --- a/synapse/rest/client/v2_alpha/receipts.py +++ b/synapse/rest/client/v2_alpha/receipts.py @@ -15,6 +15,7 @@ from twisted.internet import defer +from synapse.api.errors import SynapseError from synapse.http.servlet import RestServlet from ._base import client_v2_pattern @@ -41,6 +42,9 @@ class ReceiptRestServlet(RestServlet): def on_POST(self, request, room_id, receipt_type, event_id): user, _ = yield self.auth.get_user_by_req(request) + if receipt_type != "m.read": + raise SynapseError(400, "Receipt type must be 'm.read'") + yield self.receipts_handler.received_client_receipt( room_id, receipt_type, |