synapse/changelog.d/11530.bugfix at 18862f20b5495bdc556c54e92fd4b1efdc718ba7 - MirrorHub/synapse - tilera Git

MirrorHub/synapse

mirror of https://mau.dev/maunium/synapse.git synced 2024-11-17 23:42:33 +01:00

Shay 70ce9aea71

Strip unauthorized fields from unsigned object in events received over federation (#11530 )

* add some tests to verify we are stripping unauthorized fields out of unsigned

* add function to strip unauthorized fields from the unsigned object of event

* newsfragment

* update newsfragment number

* add check to on_send_membership_event

* refactor tests

* fix lint error

* slightly refactor tests and add some comments

* slight refactor

* refactor tests

* fix import error

* slight refactor

* remove unsigned filtration code from synapse/handlers/federation_event.py

* lint

* move unsigned filtering code to event base

* refactor tests

* update newsfragment

* requested changes

* remove unused retun values

2022-01-06 09:09:30 -08:00

2 lines

No EOL

136 B

Text

Raw Blame History

	`Fix a long-standing issue which could cause Synapse to incorrectly accept data in the unsigned field of events`
	`received over federation.`