mirror of
https://git.anonymousland.org/anonymousland/synapse.git
synced 2025-04-28 11:36:07 -04:00
Merge pull request #1150 from Rugvip/state_key
api/auth: fix for not being allowed to set your own state_key
This commit is contained in:
commit
a940618c94
@ -1002,16 +1002,6 @@ class Auth(object):
|
|||||||
403,
|
403,
|
||||||
"You are not allowed to set others state"
|
"You are not allowed to set others state"
|
||||||
)
|
)
|
||||||
else:
|
|
||||||
sender_domain = UserID.from_string(
|
|
||||||
event.user_id
|
|
||||||
).domain
|
|
||||||
|
|
||||||
if sender_domain != event.state_key:
|
|
||||||
raise AuthError(
|
|
||||||
403,
|
|
||||||
"You are not allowed to set others state"
|
|
||||||
)
|
|
||||||
|
|
||||||
return True
|
return True
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user