diff options
| author | Matthew Hodgson <matthew@arasphere.net> | 2016-04-11 10:40:29 +0100 |
|---|---|---|
| committer | Matthew Hodgson <matthew@arasphere.net> | 2016-04-11 10:40:29 +0100 |
| commit | 4bd3d252188e5a4630d35d8b4bf1f3c287e92944 (patch) | |
| tree | 9d78df7b09d93b0d49805ff1516f0ec5250c55a1 /README.rst | |
| parent | Merge pull request #677 from matrix-org/erikj/dns_cache (diff) | |
| parent | fix typos and needless try/except from PR review (diff) | |
| download | synapse-4bd3d252188e5a4630d35d8b4bf1f3c287e92944.tar.xz | |
Merge pull request #688 from matrix-org/matthew/preview_urls
URL previewing support
Diffstat (limited to 'README.rst')
| -rw-r--r-- | README.rst | 19 |
1 files changed, 18 insertions, 1 deletions
diff --git a/README.rst b/README.rst index 6136e0c1fe..02e7c61d1e 100644 --- a/README.rst +++ b/README.rst @@ -104,7 +104,7 @@ Installing prerequisites on Ubuntu or Debian:: sudo apt-get install build-essential python2.7-dev libffi-dev \ python-pip python-setuptools sqlite3 \ - libssl-dev python-virtualenv libjpeg-dev + libssl-dev python-virtualenv libjpeg-dev libxslt1-dev Installing prerequisites on ArchLinux:: @@ -557,6 +557,23 @@ as the primary means of identity and E2E encryption is not complete. As such, we are running a single identity server (https://matrix.org) at the current time. + +URL Previews +============ + +Synapse 0.15.0 introduces an experimental new API for previewing URLs at +/_matrix/media/r0/preview_url. This is disabled by default. To turn it on +you must enable the `url_preview_enabled: True` config parameter and explicitly +specify the IP ranges that Synapse is not allowed to spider for previewing in +the `url_preview_ip_range_blacklist` configuration parameter. This is critical +from a security perspective to stop arbitrary Matrix users spidering 'internal' +URLs on your network. At the very least we recommend that your loopback and +RFC1918 IP addresses are blacklisted. + +This also requires the optional lxml and netaddr python dependencies to be +installed. + + Password reset ============== |