anonymousland-synapse/changelog.d
Andrew Morgan 094896a69d
Add a config option for validating 'next_link' parameters against a domain whitelist (#8275)
This is a config option ported over from DINUM's Sydent: https://github.com/matrix-org/sydent/pull/285

They've switched to validating 3PIDs via Synapse rather than Sydent, and would like to retain this functionality.

This original purpose for this change is phishing prevention. This solution could also potentially be replaced by a similar one to https://github.com/matrix-org/synapse/pull/8004, but across all `*/submit_token` endpoint.

This option may still be useful to enterprise even with that safeguard in place though, if they want to be absolutely sure that their employees don't follow links to other domains.
2020-09-08 16:03:09 +01:00
..
.gitignore
8230.misc Catch-up after Federation Outage (split, 1) (#8230) 2020-09-04 12:22:23 +01:00
8243.misc Rename 'populate_stats_process_rooms_2' background job back to 'populate_stats_process_rooms' again (#8243) 2020-09-08 11:05:59 +01:00
8247.misc Catch up after Federation Outage (split, 2): Track last successful stream ordering after transmission (#8247) 2020-09-04 15:06:51 +01:00
8250.misc Clean up types for PaginationConfig (#8250) 2020-09-08 15:00:17 +01:00
8256.misc In light of #8255, use BIGINTs for destination_rooms (#8256) 2020-09-04 15:07:29 +01:00
8257.misc Fix MultiWriterIdGenerator.current_position. (#8257) 2020-09-08 14:26:54 +01:00
8258.misc Add tests for last_successful_stream_ordering (#8258) 2020-09-07 10:11:38 +01:00
8259.misc Directly import json from the standard library. (#8259) 2020-09-08 07:33:48 -04:00
8261.misc Allow for make_awaitable's return value to be re-used. (#8261) 2020-09-08 07:26:55 -04:00
8262.bugfix Bump canonicaljson to version 1.4.0 (#8262) 2020-09-07 12:21:38 +01:00
8265.bugfix Run database updates in a transaction (#8265) 2020-09-07 11:41:50 +01:00
8268.bugfix Fix stack overflow when logging system encounters an error (#8268) 2020-09-07 16:54:30 +01:00
8275.feature Add a config option for validating 'next_link' parameters against a domain whitelist (#8275) 2020-09-08 16:03:09 +01:00
8278.bugfix Use the right constructor for log records (#8278) 2020-09-08 14:52:51 +01:00