MatrixSynapse/synapse
Richard van der Hoff 6e8fb42be7
Improve validation for `send_{join,leave,knock}` (#10225)
The idea here is to stop people sending things that aren't joins/leaves/knocks through these endpoints: previously you could send anything you liked through them. I wasn't able to find any security holes from doing so, but it doesn't sound like a good thing.
2021-06-24 15:30:49 +01:00
..
_scripts
api MSC2918 Refresh tokens implementation (#9450) 2021-06-24 14:33:20 +01:00
app Ensure that errors during startup are written to the logs and the console. (#10191) 2021-06-21 11:41:25 +01:00
appservice
config MSC2918 Refresh tokens implementation (#9450) 2021-06-24 14:33:20 +01:00
crypto
events Fix wrapping of legacy check_registration_for_spam (#10238) 2021-06-23 17:22:08 +02:00
federation Improve validation for `send_{join,leave,knock}` (#10225) 2021-06-24 15:30:49 +01:00
groups
handlers Improve validation for `send_{join,leave,knock}` (#10225) 2021-06-24 15:30:49 +01:00
http Drop Origin & Accept from Access-Control-Allow-Headers value (#10114) 2021-06-23 11:25:03 +01:00
logging Expose opentracing trace id in response headers (#10199) 2021-06-18 11:43:22 +01:00
metrics
module_api MSC2918 Refresh tokens implementation (#9450) 2021-06-24 14:33:20 +01:00
push
replication MSC2918 Refresh tokens implementation (#9450) 2021-06-24 14:33:20 +01:00
res/templates
rest MSC2918 Refresh tokens implementation (#9450) 2021-06-24 14:33:20 +01:00
server_notices
spam_checker_api
state
static
storage MSC2918 Refresh tokens implementation (#9450) 2021-06-24 14:33:20 +01:00
streams
util Standardise the module interface (#10062) 2021-06-18 12:15:52 +01:00
__init__.py 1.37.0rc1 2021-06-23 09:38:27 +01:00
event_auth.py
notifier.py
python_dependencies.py
server.py Standardise the module interface (#10062) 2021-06-18 12:15:52 +01:00
types.py
visibility.py