synapse-product/synapse/rest
Denis Kasak 337f38cac3
Implement a content type allow list for URL previews (#11936)
This implements an allow list for content types for which Synapse will attempt URL preview. If a URL resolves to a resource with a content type which isn't in the list, the download will terminate immediately.

This makes sense given that Synapse would never successfully generate a URL preview for such files in the first place, and helps prevent issues with streaming media servers, such as #8302.

Signed-off-by: Denis Kasak dkasak@termina.org.uk
2022-02-10 15:43:01 +00:00
..
admin Improvements to bundling aggregations. (#11815) 2022-01-26 08:27:04 -05:00
client Add a callback to allow modules to deny 3PID (#11854) 2022-02-08 11:20:32 +01:00
consent Use direct references for configuration variables (part 4). (#10893) 2021-09-23 12:03:01 -04:00
key Add missing type hints to synapse.http. (#11571) 2021-12-14 07:00:47 -05:00
media Implement a content type allow list for URL previews (#11936) 2022-02-10 15:43:01 +00:00
synapse Use direct references for configuration variables (part 5). (#10897) 2021-09-24 07:25:21 -04:00
__init__.py Misc typing fixes for tests, part 1 of N (#11323) 2021-11-12 15:50:54 +00:00
health.py Add missing type hints to non-client REST servlets. (#10817) 2021-09-15 08:45:32 -04:00
well_known.py Default value for public_baseurl (#11210) 2021-11-08 14:13:10 +00:00