forked-synapse/synapse
Josh Qou d939120421
Fix unsafe hotserving behaviour for non-multimedia uploads. (#15680)
* Fix unsafe hotserving behaviour for non-multimedia uploads.

* invert disposition assert

* test_media_storage.py: run lint

* test_base.py: /inline/attachment/s

* Only return attachment for disposition type, update tests

* Update synapse/media/_base.py

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>

* Update changelog.d/15680.bugfix

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>

* add attribution

* Update changelog.

---------

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>
2023-06-15 14:23:27 +01:00
..
_scripts Add an admin API endpoint to support per-user feature flags (#15344) 2023-04-28 11:33:45 -07:00
api Stabilize support for MSC3952: Intentional mentions. (#15520) 2023-06-06 09:11:07 +01:00
app Remove old R30 because R30v2 supercedes it (#10428) 2023-05-19 11:13:44 -05:00
appservice Consolidate logic to check for deactivated users. (#15634) 2023-05-23 10:35:43 -04:00
config Revert "Allow for the configuration of max request retries and min/max retry delays in the matrix federation client (#12504)" 2023-06-14 11:55:57 +02:00
crypto Factor out an is_mine_server_name method (#15542) 2023-05-05 15:06:22 +01:00
events Replace EventContext fields prev_group and delta_ids with field state_group_deltas (#15233) 2023-06-13 13:22:06 -07:00
federation Fix MSC3983 support: only one OTK per device was returned through federation (#15770) 2023-06-13 19:51:47 +02:00
handlers Fix joining rooms through aliases where the alias server isn't a real homeserver (#15776) 2023-06-14 15:42:33 +01:00
http Revert "Allow for the configuration of max request retries and min/max retry delays in the matrix federation client (#12504)" 2023-06-14 11:55:57 +02:00
logging Trace functions which return Awaitable (#15650) 2023-06-06 17:39:22 -05:00
media Fix unsafe hotserving behaviour for non-multimedia uploads. (#15680) 2023-06-15 14:23:27 +01:00
metrics Quick & dirty metric for background update status (#15740) 2023-06-07 17:12:23 +00:00
module_api N + 3: Read from column full_user_id rather than user_id of tables profiles and user_filters (#15649) 2023-06-02 17:24:13 -07:00
push Stabilize support for MSC3952: Intentional mentions. (#15520) 2023-06-06 09:11:07 +01:00
replication Add Unix socket support for Redis connections (#15644) 2023-05-26 15:28:39 -04:00
res Use oEmbed for YouTube Shorts (#15025) 2023-05-03 12:54:42 -04:00
rest Remove some unused server_name fields (#15723) 2023-06-06 12:32:29 +01:00
server_notices Remove unused room_alias field from /createRoom response (#15093) 2023-02-22 11:07:28 +00:00
spam_checker_api Fix import in module_api module and docs on the new check_event_for_spam signature (#12918) 2022-05-31 12:04:53 +02:00
state Instrument state and state_group storage related things (tracing) (#15610) 2023-05-19 12:26:58 -05:00
static Remove registration fallback code. (#15405) 2023-04-13 11:36:29 -04:00
storage Prefill events after invalidate not before when persisting events (#15758) 2023-06-14 09:42:18 +01:00
streams Use mypy 1.0 (#15052) 2023-02-16 16:09:11 +00:00
types Fix empty scope when having version mismatch between workers (#15774) 2023-06-14 11:53:55 +02:00
util Prefill events after invalidate not before when persisting events (#15758) 2023-06-14 09:42:18 +01:00
__init__.py Use immutabledict instead of frozendict (#15113) 2023-03-22 17:15:34 +00:00
event_auth.py Reject instead of erroring on invalid membership events. (#15564) 2023-05-15 15:01:29 -04:00
notifier.py Move ThirdPartyEventRules into module_api/callbacks (#15535) 2023-05-04 14:18:22 +00:00
py.typed Mark Module API error imports as re-exported and mark Synapse as containing type annotations (#11054) 2021-10-13 08:42:41 +01:00
server.py Refactor config to be an experimental feature 2023-05-30 09:43:06 -04:00
visibility.py Log when events are (unexpectedly) filtered out of responses in tests (#14213) 2023-06-01 21:27:18 -05:00