MirrorHub/synapse
0
0
Fork 1
mirror of https://mau.dev/maunium/synapse.git synced 2024-12-14 08:43:49 +01:00
Code Issues Projects Releases Wiki Activity

Merge pull request #5801 from matrix-org/erikj/recursive_tombstone

Browse source 
Don't allow clients to send tombstones that reference the same room
This commit is contained in:
Erik Johnston 2019-08-01 13:45:35 +01:00 committed by GitHub
commit 0b36decfb6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
changelog.d/5801.misc Normal file
View file

@ -0,0 +1 @@
Don't allow clients to send tombstone events that reference the room it's sent in.

9
synapse/events/validator.py
View file

@ -106,6 +106,15 @@ class EventValidator(object):
if event.content["membership"] not in Membership.LIST:
raise SynapseError(400, "Invalid membership key")
elif event.type == EventTypes.Tombstone:
if "replacement_room" not in event.content:
raise SynapseError(400, "Content has no replacement_room key")
if event.content["replacement_room"] == event.room_id:
raise SynapseError(
400, "Tombstone cannot reference the room it was sent in"
)
def _ensure_strings(self, d, keys):
for s in keys:
if s not in d: