diff options
| author | Richard van der Hoff <1389908+richvdh@users.noreply.github.com> | 2021-06-24 15:30:49 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-06-24 15:30:49 +0100 |
| commit | 6e8fb42be7657f9d4958c02d87cff865225714d2 (patch) | |
| tree | 6f287326b09faae0ec5ced43d4718b92d4b20cf3 /changelog.d | |
| parent | MSC2918 Refresh tokens implementation (#9450) (diff) | |
| download | synapse-6e8fb42be7657f9d4958c02d87cff865225714d2.tar.xz | |
Improve validation for `send_{join,leave,knock}` (#10225)
The idea here is to stop people sending things that aren't joins/leaves/knocks through these endpoints: previously you could send anything you liked through them. I wasn't able to find any security holes from doing so, but it doesn't sound like a good thing.
Diffstat (limited to 'changelog.d')
| -rw-r--r-- | changelog.d/10225.feature | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/changelog.d/10225.feature b/changelog.d/10225.feature new file mode 100644 index 0000000000..d16f66ffe9 --- /dev/null +++ b/changelog.d/10225.feature @@ -0,0 +1 @@ +Improve validation on federation `send_{join,leave,knock}` endpoints. |