Richard van der Hoff 33f469ba19 Apply some limits to depth to counter abuse ...

* When creating a new event, cap its depth to 2^63 - 1
* When receiving events, reject any without a sensible depth

As per https://docs.google.com/document/d/1I3fi2S-XnpO45qrpCsowZv8P8dHcNZ4fsBsbOW7KABI

2018-05-01 17:54:19 +01:00

..

api

Apply some limits to depth to counter abuse

2018-05-01 17:54:19 +01:00

app

Use six.itervalues in some places

2018-04-15 20:39:43 +02:00

appservice

Refactor ResponseCache usage

2018-04-12 13:02:15 +01:00

config

Merge pull request #3074 from NotAFile/fix-py3-prints

2018-04-09 23:44:41 +01:00

crypto

Use str(e) instead of e.message

2018-04-15 20:32:42 +02:00

events

Remove context.push_actions

2018-02-15 15:47:06 +00:00

federation

Apply some limits to depth to counter abuse

2018-05-01 17:54:19 +01:00

groups

de-lint, quote consistency

2018-04-06 16:02:06 +01:00

handlers

Apply some limits to depth to counter abuse

2018-05-01 17:54:19 +01:00

http

Merge pull request #3061 from NotAFile/add-some-byte-strings

2018-04-09 23:54:05 +01:00

metrics

s/list/tuple

2018-04-12 11:19:04 +01:00

module_api

Delete devices in various logout situations

2017-11-29 16:44:35 +00:00

push

Update comments

2018-02-21 11:29:49 +00:00

replication

Refactor ResponseCache usage

2018-04-12 13:02:15 +01:00

rest

Merge pull request #3079 from matrix-org/erikj/limit_concurrent_sends

2018-04-10 16:43:58 +01:00

static/client

Updates to fallback CAS login to do new token login

2015-11-06 09:57:17 +00:00

storage

Fix media admin APIs

2018-04-26 11:31:22 +01:00

streams

replace 'except:' with 'except Exception:'

2017-10-23 15:52:32 +01:00

util

Merge pull request #3107 from NotAFile/py3-bool-nonzero

2018-04-20 15:43:39 +01:00

__init__.py

update changelog and bump version to 0.28.0

2018-04-26 15:51:39 +01:00

event_auth.py

Fix templating error with unban permission message

2018-01-07 19:52:58 -07:00

notifier.py

add __bool__ alias to __nonzero__ methods

2018-04-15 20:40:47 +02:00

python_dependencies.py

Revert "Use sortedcontainers instead of blist"

2018-04-13 11:16:43 +01:00

server.py

Split RoomMemberWorkerHandler to separate file

2018-03-14 11:41:45 +00:00

server.pyi

Factor out resolve_state_groups to a separate handler

2018-02-01 12:40:04 +00:00

state.py

Measure time it takes to calculate state group ID

2018-03-28 11:03:52 +01:00

types.py

In DomainSpecificString, override __repr__ in addition to __str__

2018-04-10 11:35:29 +02:00

visibility.py

Remove preserve_context_over_{fn, deferred}

2017-11-14 11:22:42 +00:00