MatrixSynapse/synapse/media
Josh Qou d939120421
Fix unsafe hotserving behaviour for non-multimedia uploads. (#15680)
* Fix unsafe hotserving behaviour for non-multimedia uploads.

* invert disposition assert

* test_media_storage.py: run lint

* test_base.py: /inline/attachment/s

* Only return attachment for disposition type, update tests

* Update synapse/media/_base.py

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>

* Update changelog.d/15680.bugfix

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>

* add attribution

* Update changelog.

---------

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>
2023-06-15 14:23:27 +01:00
..
_base.py Fix unsafe hotserving behaviour for non-multimedia uploads. (#15680) 2023-06-15 14:23:27 +01:00
filepath.py
media_repository.py Add config option to prevent media downloads from listed domains. (#15197) 2023-05-09 14:08:51 -04:00
media_storage.py
oembed.py Add stubs package for lxml. (#15697) 2023-05-31 17:06:57 +00:00
preview_html.py Add stubs package for lxml. (#15697) 2023-05-31 17:06:57 +00:00
storage_provider.py
thumbnailer.py
url_previewer.py Rename blacklist/whitelist internally. (#15620) 2023-05-19 12:25:25 +00:00