summary refs log tree commit diff
path: root/synapse/handlers/e2e_keys.py
diff options
context:
space:
mode:
authorPatrick Cloke <clokep@users.noreply.github.com>2023-10-31 09:58:30 -0400
committerGitHub <noreply@github.com>2023-10-31 13:58:30 +0000
commit7a3a55ac98847d7adb0e200378abe07ef8d0c645 (patch)
treee8672425999bab6a4026044167769c3ce18ea1d2 /synapse/handlers/e2e_keys.py
parentClaim local one-time-keys in bulk (#16565) (diff)
downloadsynapse-7a3a55ac98847d7adb0e200378abe07ef8d0c645.tar.xz
Merge pull request from GHSA-mp92-3jfm-3575
Diffstat (limited to '')
-rw-r--r--synapse/handlers/e2e_keys.py6
1 files changed, 6 insertions, 0 deletions
diff --git a/synapse/handlers/e2e_keys.py b/synapse/handlers/e2e_keys.py
index d340d4aebe..d06524495f 100644
--- a/synapse/handlers/e2e_keys.py
+++ b/synapse/handlers/e2e_keys.py
@@ -542,6 +542,12 @@ class E2eKeysHandler:
         device_keys_query: Dict[str, Optional[List[str]]] = query_body.get(
             "device_keys", {}
         )
+        if any(
+            not self.is_mine(UserID.from_string(user_id))
+            for user_id in device_keys_query
+        ):
+            raise SynapseError(400, "User is not hosted on this homeserver")
+
         res = await self.query_local_devices(
             device_keys_query,
             include_displaynames=(