Fix 500 ISE when sending alias event without a state_key

2024-09-09 14:42:09 +00:00 · 2016-07-15 18:58:25 +01:00 · 2016-07-15 18:58:25 +01:00 · d137e03231
commit d137e03231
parent a2d288c6a9
1 changed files with 5 additions and 0 deletions
--- a/synapse/api/auth.py
+++ b/synapse/api/auth.py
@ -121,6 +121,11 @@ class Auth(object):

            # FIXME: Temp hack
            if event.type == EventTypes.Aliases:
+                if not event.is_state():
+                    raise AuthError(
+                        403,
+                        "Alias event must be a state event",
+                    )
                if not event.state_key:
                    raise AuthError(
                        403,