diff options
| author | AndrewFerr <AndrewFerr@users.noreply.github.com> | 2021-02-19 04:50:41 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-02-19 09:50:41 +0000 |
| commit | 9bc74743d53f4795b8bbd674d2945962a9bb29f9 (patch) | |
| tree | 049e203bcb3dcb84b16345a4ba885b72521e63e1 /synapse/handlers/profile.py | |
| parent | Merge branch 'master' into develop (diff) | |
| download | synapse-9bc74743d53f4795b8bbd674d2945962a9bb29f9.tar.xz | |
Add configs to make profile data more private (#9203)
Add off-by-default configuration settings to: - disable putting an invitee's profile info in invite events - disable profile lookup via federation Signed-off-by: Andrew Ferrazzutti <fair@miscworks.net>
Diffstat (limited to 'synapse/handlers/profile.py')
| -rw-r--r-- | synapse/handlers/profile.py | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/synapse/handlers/profile.py b/synapse/handlers/profile.py index 2f62d84fb5..d933dd3f01 100644 --- a/synapse/handlers/profile.py +++ b/synapse/handlers/profile.py @@ -310,6 +310,16 @@ class ProfileHandler(BaseHandler): await self._update_join_states(requester, target_user) async def on_profile_query(self, args: JsonDict) -> JsonDict: + """Handles federation profile query requests. + """ + + if not self.hs.config.allow_profile_lookup_over_federation: + raise SynapseError( + 403, + "Profile lookup over federation is disabled on this homeserver", + Codes.FORBIDDEN, + ) + user = UserID.from_string(args["user_id"]) if not self.hs.is_mine(user): raise SynapseError(400, "User is not hosted on this homeserver") |