mirror of
https://git.anonymousland.org/anonymousland/synapse.git
synced 2025-06-22 11:24:05 -04:00
Block clients from sending server ACLs that lock the local server out. (#8708)
Fixes #4042
This commit is contained in:
parent
4b09b7438e
commit
243d427fbc
5 changed files with 80 additions and 9 deletions
|
@ -1138,6 +1138,9 @@ class EventCreationHandler:
|
|||
if original_event.room_id != event.room_id:
|
||||
raise SynapseError(400, "Cannot redact event from a different room")
|
||||
|
||||
if original_event.type == EventTypes.ServerACL:
|
||||
raise AuthError(403, "Redacting server ACL events is not permitted")
|
||||
|
||||
prev_state_ids = await context.get_prev_state_ids()
|
||||
auth_events_ids = self.auth.compute_auth_events(
|
||||
event, prev_state_ids, for_verification=True
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue