summary refs log tree commit diff
path: root/synapse/federation
diff options
context:
space:
mode:
authorRichard van der Hoff <richard@matrix.org>2018-08-02 11:53:52 +0100
committerRichard van der Hoff <richard@matrix.org>2018-08-02 13:48:40 +0100
commit0a65450d044fb580d789013dcdac48b10c930761 (patch)
treec31f1e86c7cff1018b47dac6a1695735cf2ffbe5 /synapse/federation
parentUpdate r0.33.0 release notes (diff)
downloadsynapse-0a65450d044fb580d789013dcdac48b10c930761.tar.xz
Validation for events/rooms in fed requests
When we get a federation request which refers to an event id, make sure that
said event is in the room the caller claims it is in.

(patch supplied by @turt2live)
Diffstat (limited to 'synapse/federation')
-rw-r--r--synapse/federation/federation_server.py1
1 files changed, 1 insertions, 0 deletions
diff --git a/synapse/federation/federation_server.py b/synapse/federation/federation_server.py
index 48f26db67c..10e71c78ce 100644
--- a/synapse/federation/federation_server.py
+++ b/synapse/federation/federation_server.py
@@ -425,6 +425,7 @@ class FederationServer(FederationBase):
             ret = yield self.handler.on_query_auth(
                 origin,
                 event_id,
+                room_id,
                 signed_auth,
                 content.get("rejects", []),
                 content.get("missing", []),