forked-synapse/synapse/api
Michael Kaye fe265fe990 SECURITY UPDATE: Prevent unauthorised users from setting state events in a room
when there is no `m.room.power_levels` event in force in the room. (PR #3397)
 
 Discussion around the Matrix Spec change proposal for this change can be
 followed at https://github.com/matrix-org/matrix-doc/issues/1304.
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQEcBAABAgAGBQJbIop9AAoJEIofk9V1tejV9lsIAJVH0l5dXROmy1KH/zt16AUA
 CXa6Vv4Vyo6hKad/fZ81OZVRr5ChK/TvbIJVn/SA/muCfdoIFdxhT8eo/pXzO2UW
 zReuLsDhAg+gSvpNus37oWj2FVsAE1HYDZ60lfaapAdZnkFit68d5DQZjO6nZHHA
 YUXcU3GUwj0ZYuUzFzYKMLu6uNNasNkN8h6SS2lF7Bm4JaKDW+mFMfCyJwdIVSEh
 BGhHoVpXdxFysD9s6Mwxqrz3KKg1Jtp7idDkk0x2S2Eh+gxyiDQQokv0oQ3+0+HG
 sgy5Iz2t2CkpS02/j+LOvAZljTmnD0bXu3srGR+25StsoDFP038Am3bfQwtD190=
 =9jsT
 -----END PGP SIGNATURE-----

Merge tag 'v0.31.2' into dinsic
2018-06-22 17:04:50 +01:00
..
__init__.py copyrights 2016-01-07 04:26:29 +00:00
auth.py Refactor get_send_level to take a power_levels event 2018-06-14 11:26:27 +01:00
constants.py Add m.encryption to event types 2018-06-22 16:47:49 +01:00
errors.py custom error code for not leaving server notices room 2018-05-22 17:27:27 +01:00
filtering.py Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
ratelimiting.py Check whether to ratelimit sooner to avoid work 2016-10-19 10:45:24 +01:00
urls.py Reject attempts to send event before privacy consent is given 2018-05-22 12:00:47 +01:00