MatrixSynapse/synapse
Denis Kasak 337f38cac3
Implement a content type allow list for URL previews (#11936)
This implements an allow list for content types for which Synapse will attempt URL preview. If a URL resolves to a resource with a content type which isn't in the list, the download will terminate immediately.

This makes sense given that Synapse would never successfully generate a URL preview for such files in the first place, and helps prevent issues with streaming media servers, such as #8302.

Signed-off-by: Denis Kasak dkasak@termina.org.uk
2022-02-10 15:43:01 +00:00
..
_scripts
api Stabilise MSC3231 (Token Based Registration) (#11867) 2022-02-04 12:15:13 +00:00
app Return JSON errors for unknown resources under /matrix/client. (#11930) 2022-02-08 07:06:25 -05:00
appservice Remove optional state of `ApplicationService.is_interested`'s `store` parameter (#11911) 2022-02-07 18:26:42 +00:00
config Experimental support to include bundled aggregations in search results (MSC3666) (#11837) 2022-02-08 09:21:20 -05:00
crypto
events
federation Improve opentracing for federation requests (#11870) 2022-02-03 12:29:16 +00:00
groups
handlers Experimental support to include bundled aggregations in search results (MSC3666) (#11837) 2022-02-08 09:21:20 -05:00
http Implement a content type allow list for URL previews (#11936) 2022-02-10 15:43:01 +00:00
logging Improve opentracing for federation requests (#11870) 2022-02-03 12:29:16 +00:00
metrics Fix type errors introduced by new annotations in the Prometheus Client library. (#11832) 2022-02-02 16:51:00 +00:00
module_api Add a callback to allow modules to deny 3PID (#11854) 2022-02-08 11:20:32 +01:00
push Revert experimental push rules from #7997. (#11884) 2022-02-02 09:49:31 -05:00
replication Add missing type hints to synapse.replication. (#11938) 2022-02-08 11:03:08 -05:00
res
rest Implement a content type allow list for URL previews (#11936) 2022-02-10 15:43:01 +00:00
server_notices
spam_checker_api
state Remove `log_function` and its uses (#11761) 2022-01-18 13:06:04 +00:00
static
storage Experimental support to include bundled aggregations in search results (MSC3666) (#11837) 2022-02-08 09:21:20 -05:00
streams
util Add missing type hints to synapse.replication. (#11938) 2022-02-08 11:03:08 -05:00
__init__.py 1.52.0 2022-02-08 11:35:05 +00:00
event_auth.py
notifier.py Send to-device messages to application services (#11215) 2022-02-01 14:13:38 +00:00
py.typed
python_dependencies.py Fix type errors introduced by new annotations in the Prometheus Client library. (#11832) 2022-02-02 16:51:00 +00:00
server.py Bundle aggregations outside of the serialization method. (#11612) 2022-01-07 09:10:46 -05:00
types.py Use auto_attribs/native type hints for attrs classes. (#11692) 2022-01-13 13:49:28 +00:00
visibility.py