synapse/changelog.d/15680.bugfix at 10c509425fb6e36cba63de94402a9a5772cba54c - MirrorHub/synapse - tilera Git

MirrorHub/synapse

mirror of https://mau.dev/maunium/synapse.git synced 2024-12-14 10:03:47 +01:00

Josh Qou d939120421

Fix unsafe hotserving behaviour for non-multimedia uploads. (#15680 )

* Fix unsafe hotserving behaviour for non-multimedia uploads.

* invert disposition assert

* test_media_storage.py: run lint

* test_base.py: /inline/attachment/s

* Only return attachment for disposition type, update tests

* Update synapse/media/_base.py

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>

* Update changelog.d/15680.bugfix

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>

* add attribution

* Update changelog.

---------

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>

2023-06-15 14:23:27 +01:00

1 line

100 B

Text

Raw Blame History

Fix a long-standing bug where media files were served in an unsafe manner. Contributed by @joshqou.