forked-synapse/synapse
Richard van der Hoff 53969e1960 SECURITY UPDATE: Prevent unauthorised users from setting state events in a room
when there is no `m.room.power_levels` event in force in the room. (PR #3397)
 
 Discussion around the Matrix Spec change proposal for this change can be
 followed at https://github.com/matrix-org/matrix-doc/issues/1304.
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQEcBAABAgAGBQJbIop9AAoJEIofk9V1tejV9lsIAJVH0l5dXROmy1KH/zt16AUA
 CXa6Vv4Vyo6hKad/fZ81OZVRr5ChK/TvbIJVn/SA/muCfdoIFdxhT8eo/pXzO2UW
 zReuLsDhAg+gSvpNus37oWj2FVsAE1HYDZ60lfaapAdZnkFit68d5DQZjO6nZHHA
 YUXcU3GUwj0ZYuUzFzYKMLu6uNNasNkN8h6SS2lF7Bm4JaKDW+mFMfCyJwdIVSEh
 BGhHoVpXdxFysD9s6Mwxqrz3KKg1Jtp7idDkk0x2S2Eh+gxyiDQQokv0oQ3+0+HG
 sgy5Iz2t2CkpS02/j+LOvAZljTmnD0bXu3srGR+25StsoDFP038Am3bfQwtD190=
 =9jsT
 -----END PGP SIGNATURE-----

Merge tag 'v0.31.2'

SECURITY UPDATE: Prevent unauthorised users from setting state events in a room
when there is no `m.room.power_levels` event in force in the room. (PR #3397)

Discussion around the Matrix Spec change proposal for this change can be
followed at https://github.com/matrix-org/matrix-doc/issues/1304.
2018-06-14 16:35:33 +01:00
..
api Refactor get_send_level to take a power_levels event 2018-06-14 11:26:27 +01:00
app Merge pull request #3264 from matrix-org/neil/sign-up-stats 2018-06-01 13:42:01 +00:00
appservice Merge remote-tracking branch 'origin/develop' into rav/use_run_in_background 2018-04-27 14:31:23 +01:00
config Changes in synapse v0.31.0 (2018-06-06) 2018-06-06 12:27:33 +01:00
crypto Fixes #3135 - Replace _OpenSSLECCurve with crypto.get_elliptic_curve (#3157) 2018-04-30 16:21:11 +01:00
events Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
federation federation/send_queue.py: fix usage of LaterGauge 2018-06-03 14:16:17 +03:00
groups Replace some more comparisons with six 2018-05-19 17:56:31 +02:00
handlers Fix event filtering in get_missing_events handler 2018-06-08 14:15:31 +01:00
http update to more consistently use seconds in any metrics or logging 2018-05-28 19:39:27 +10:00
metrics Hopefully, fix LaterGuage error handling 2018-06-04 15:59:14 +01:00
module_api Delete devices in various logout situations 2017-11-29 16:44:35 +00:00
push Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
replication Fix replication metrics 2018-06-04 16:23:05 +01:00
rest Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
server_notices Avoid sending consent notice to guest users 2018-05-25 11:36:43 +01:00
static/client Updates to fallback CAS login to do new token login 2015-11-06 09:57:17 +00:00
storage Merge pull request #3264 from matrix-org/neil/sign-up-stats 2018-06-01 13:42:01 +00:00
streams replace 'except:' with 'except Exception:' 2017-10-23 15:52:32 +01:00
util Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
__init__.py v0.31.2 2018-06-14 16:24:32 +01:00
event_auth.py Make default state_default 50 2018-06-14 12:38:09 +01:00
notifier.py cleanup pep8 errors 2018-05-22 16:54:22 -05:00
python_dependencies.py replacing portions 2018-05-21 19:47:37 -05:00
server.py Stub out ServerNoticesSender on the workers 2018-05-22 11:54:51 +01:00
server.pyi Send users a server notice about consent 2018-05-22 11:54:51 +01:00
state.py Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
types.py In DomainSpecificString, override __repr__ in addition to __str__ 2018-04-10 11:35:29 +02:00
visibility.py Remove preserve_context_over_{fn, deferred} 2017-11-14 11:22:42 +00:00