diff --git a/tests/test_event_auth.py b/tests/test_event_auth.py
index 371cd201af..e42d7b9ba0 100644
--- a/tests/test_event_auth.py
+++ b/tests/test_event_auth.py
@@ -19,7 +19,7 @@ from parameterized import parameterized
from synapse import event_auth
from synapse.api.constants import EventContentFields
-from synapse.api.errors import AuthError
+from synapse.api.errors import AuthError, SynapseError
from synapse.api.room_versions import EventFormatVersions, RoomVersion, RoomVersions
from synapse.events import EventBase, make_event_from_dict
from synapse.storage.databases.main.events_worker import EventRedactBehaviour
@@ -689,6 +689,45 @@ class EventAuthTestCase(unittest.TestCase):
auth_events.values(),
)
+ def test_room_v10_rejects_string_power_levels(self) -> None:
+ pl_event_content = {"users_default": "42"}
+ pl_event = make_event_from_dict(
+ {
+ "room_id": TEST_ROOM_ID,
+ **_maybe_get_event_id_dict_for_room_version(RoomVersions.V10),
+ "type": "m.room.power_levels",
+ "sender": "@test:test.com",
+ "state_key": "",
+ "content": pl_event_content,
+ "signatures": {"test.com": {"ed25519:0": "some9signature"}},
+ },
+ room_version=RoomVersions.V10,
+ )
+
+ pl_event2_content = {"events": {"m.room.name": "42", "m.room.power_levels": 42}}
+ pl_event2 = make_event_from_dict(
+ {
+ "room_id": TEST_ROOM_ID,
+ **_maybe_get_event_id_dict_for_room_version(RoomVersions.V10),
+ "type": "m.room.power_levels",
+ "sender": "@test:test.com",
+ "state_key": "",
+ "content": pl_event2_content,
+ "signatures": {"test.com": {"ed25519:0": "some9signature"}},
+ },
+ room_version=RoomVersions.V10,
+ )
+
+ with self.assertRaises(SynapseError):
+ event_auth._check_power_levels(
+ pl_event.room_version, pl_event, {("fake_type", "fake_key"): pl_event2}
+ )
+
+ with self.assertRaises(SynapseError):
+ event_auth._check_power_levels(
+ pl_event.room_version, pl_event2, {("fake_type", "fake_key"): pl_event}
+ )
+
# helpers for making events
TEST_DOMAIN = "example.com"
|