summary refs log tree commit diff
path: root/synapse/rest
diff options
context:
space:
mode:
authorRichard van der Hoff <1389908+richvdh@users.noreply.github.com>2020-01-30 17:20:55 +0000
committerGitHub <noreply@github.com>2020-01-30 17:20:55 +0000
commit184303b8650a90256f84bc9801b749a5b81b6d4b (patch)
tree85a633efdad219b72795afda9ac584f69914bcdc /synapse/rest
parentBackgroud update to clean out rooms from current state (#6802) (diff)
downloadsynapse-184303b8650a90256f84bc9801b749a5b81b6d4b.tar.xz
MSC2260: Block direct sends of m.room.aliases events (#6794)
as per MSC2260

Diffstat (limited to 'synapse/rest')
-rw-r--r--synapse/rest/client/v1/room.py12
1 files changed, 12 insertions, 0 deletions
diff --git a/synapse/rest/client/v1/room.py b/synapse/rest/client/v1/room.py
index 5aef8238b8..6f31584c51 100644
--- a/synapse/rest/client/v1/room.py
+++ b/synapse/rest/client/v1/room.py
@@ -184,6 +184,12 @@ class RoomStateEventRestServlet(TransactionRestServlet):
 
         content = parse_json_object_from_request(request)
 
+        if event_type == EventTypes.Aliases:
+            # MSC2260
+            raise SynapseError(
+                400, "Cannot send m.room.aliases events via /rooms/{room_id}/state"
+            )
+
         event_dict = {
             "type": event_type,
             "content": content,
@@ -231,6 +237,12 @@ class RoomSendEventRestServlet(TransactionRestServlet):
         requester = await self.auth.get_user_by_req(request, allow_guest=True)
         content = parse_json_object_from_request(request)
 
+        if event_type == EventTypes.Aliases:
+            # MSC2260
+            raise SynapseError(
+                400, "Cannot send m.room.aliases events via /rooms/{room_id}/send"
+            )
+
         event_dict = {
             "type": event_type,
             "content": content,