Richard van der Hoff 53969e1960 SECURITY UPDATE: Prevent unauthorised users from setting state events in a room ...

when there is no `m.room.power_levels` event in force in the room. (PR #3397)
 
 Discussion around the Matrix Spec change proposal for this change can be
 followed at https://github.com/matrix-org/matrix-doc/issues/1304.
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQEcBAABAgAGBQJbIop9AAoJEIofk9V1tejV9lsIAJVH0l5dXROmy1KH/zt16AUA
 CXa6Vv4Vyo6hKad/fZ81OZVRr5ChK/TvbIJVn/SA/muCfdoIFdxhT8eo/pXzO2UW
 zReuLsDhAg+gSvpNus37oWj2FVsAE1HYDZ60lfaapAdZnkFit68d5DQZjO6nZHHA
 YUXcU3GUwj0ZYuUzFzYKMLu6uNNasNkN8h6SS2lF7Bm4JaKDW+mFMfCyJwdIVSEh
 BGhHoVpXdxFysD9s6Mwxqrz3KKg1Jtp7idDkk0x2S2Eh+gxyiDQQokv0oQ3+0+HG
 sgy5Iz2t2CkpS02/j+LOvAZljTmnD0bXu3srGR+25StsoDFP038Am3bfQwtD190=
 =9jsT
 -----END PGP SIGNATURE-----

Merge tag 'v0.31.2'

SECURITY UPDATE: Prevent unauthorised users from setting state events in a room
when there is no `m.room.power_levels` event in force in the room. (PR #3397)

Discussion around the Matrix Spec change proposal for this change can be
followed at https://github.com/matrix-org/matrix-doc/issues/1304.

2018-06-14 16:35:33 +01:00

..

api

Refactor get_send_level to take a power_levels event

2018-06-14 11:26:27 +01:00

app

Merge pull request #3264 from matrix-org/neil/sign-up-stats

2018-06-01 13:42:01 +00:00

appservice

Merge remote-tracking branch 'origin/develop' into rav/use_run_in_background

2018-04-27 14:31:23 +01:00

config

Changes in synapse v0.31.0 (2018-06-06)

2018-06-06 12:27:33 +01:00

crypto

Fixes #3135 - Replace _OpenSSLECCurve with crypto.get_elliptic_curve (#3157)

2018-04-30 16:21:11 +01:00

events

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

federation

federation/send_queue.py: fix usage of LaterGauge

2018-06-03 14:16:17 +03:00

groups

Replace some more comparisons with six

2018-05-19 17:56:31 +02:00

handlers

Fix event filtering in get_missing_events handler

2018-06-08 14:15:31 +01:00

http

update to more consistently use seconds in any metrics or logging

2018-05-28 19:39:27 +10:00

metrics

Hopefully, fix LaterGuage error handling

2018-06-04 15:59:14 +01:00

module_api

Delete devices in various logout situations

2017-11-29 16:44:35 +00:00

push

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

replication

Fix replication metrics

2018-06-04 16:23:05 +01:00

rest

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

server_notices

Avoid sending consent notice to guest users

2018-05-25 11:36:43 +01:00

static/client

Updates to fallback CAS login to do new token login

2015-11-06 09:57:17 +00:00

storage

Merge pull request #3264 from matrix-org/neil/sign-up-stats

2018-06-01 13:42:01 +00:00

streams

replace 'except:' with 'except Exception:'

2017-10-23 15:52:32 +01:00

util

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

__init__.py

v0.31.2

2018-06-14 16:24:32 +01:00

event_auth.py

Make default state_default 50

2018-06-14 12:38:09 +01:00

notifier.py

cleanup pep8 errors

2018-05-22 16:54:22 -05:00

python_dependencies.py

replacing portions

2018-05-21 19:47:37 -05:00

server.py

Stub out ServerNoticesSender on the workers

2018-05-22 11:54:51 +01:00

server.pyi

Send users a server notice about consent

2018-05-22 11:54:51 +01:00

state.py

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

types.py

In DomainSpecificString, override __repr__ in addition to __str__

2018-04-10 11:35:29 +02:00

visibility.py

Remove preserve_context_over_{fn, deferred}

2017-11-14 11:22:42 +00:00