Eric Eastwood db868db594

Fix access token leak to logs from proxyagent (#13855) ...

This can happen specifically with an application service `/transactions/10722?access_token=leaked` request

Fix https://github.com/matrix-org/synapse/issues/13010

---

Saw an example leak in https://github.com/matrix-org/synapse/issues/13423#issuecomment-1205348482

```
2022-08-04 14:47:57,925 - synapse.http.client - 401 - DEBUG - as-sender-signal-1 - Sending request PUT http://localhost:29328/transactions/10722?access_token=<redacted>
2022-08-04 14:47:57,926 - synapse.http.proxyagent - 223 - DEBUG - as-sender-signal-1 - Requesting b'http://localhost:29328/transactions/10722?access_token=leaked' via <HostnameEndpoint localhost:29328>
```

2022-09-23 11:49:39 -05:00

..

_scripts

Support enabling/disabling pushers (from MSC3881) (#13799)

2022-09-21 14:39:01 +00:00

api

Faster Remote Room Joins: tell remote homeservers that we are unable to authorise them if they query a room which has partial state on our server. (#13823)

2022-09-23 11:47:16 +01:00

app

Fix Prometheus recording rules to not use legacy metric names. (#13718)

2022-09-08 15:01:42 +01:00

appservice

Add prometheus counters for content types other than events (#13175)

2022-07-13 15:18:20 +01:00

config

Accept & store thread IDs for receipts (implement MSC3771). (#13782)

2022-09-23 14:33:28 +00:00

crypto

Instrument _check_sigs_and_hash_and_fetch to trace time spent in child concurrent calls (#13588)

2022-08-23 21:53:37 -05:00

events

Don't include redundant prev_state in new events (#13791)

2022-09-20 09:44:38 +01:00

federation

Faster Remote Room Joins: tell remote homeservers that we are unable to authorise them if they query a room which has partial state on our server. (#13823)

2022-09-23 11:47:16 +01:00

handlers

Accept & store thread IDs for receipts (implement MSC3771). (#13782)

2022-09-23 14:33:28 +00:00

http

Fix access token leak to logs from proxyagent (#13855)

2022-09-23 11:49:39 -05:00

logging

Tag trace with instance name (#13761)

2022-09-09 11:31:37 -05:00

metrics

Fix cache metrics not being updated when not using the legacy exposition module. (#13717)

2022-09-08 15:30:48 +01:00

module_api

Add cache invalidation across workers to module API (#13667)

2022-09-21 15:32:01 +02:00

push

Track device IDs for pushers (#13831)

2022-09-21 15:31:53 +00:00

replication

Accept & store thread IDs for receipts (implement MSC3771). (#13782)

2022-09-23 14:33:28 +00:00

res

Add viewport directive to HTML templates to optimise for mobile (#13493)

2022-08-11 14:04:20 +01:00

rest

Accept & store thread IDs for receipts (implement MSC3771). (#13782)

2022-09-23 14:33:28 +00:00

server_notices

Directly lookup local membership instead of getting all members in a room first (get_users_in_room mis-use) (#13608)

2022-08-24 14:13:12 -05:00

spam_checker_api

Fix import in module_api module and docs on the new check_event_for_spam signature (#12918)

2022-05-31 12:04:53 +02:00

state

Avoid putting rejected events in room state (#13723)

2022-09-16 12:45:04 +01:00

static

Add viewport directive to HTML templates to optimise for mobile (#13493)

2022-08-11 14:04:20 +01:00

storage

Accept & store thread IDs for receipts (implement MSC3771). (#13782)

2022-09-23 14:33:28 +00:00

streams

Instrument /messages for understandable traces in Jaeger (#13368)

2022-08-03 10:57:38 -05:00

util

Add cache invalidation across workers to module API (#13667)

2022-09-21 15:32:01 +02:00

__init__.py

Check if Rust lib needs rebuilding. (#13759)

2022-09-12 10:03:42 +00:00

event_auth.py

Rename the EventFormatVersions enum values so that they line up with room version numbers. (#13706)

2022-09-07 11:08:20 +01:00

notifier.py

Notifier: accept callbacks to fire on room joins (#13254)

2022-07-13 19:48:24 +01:00

py.typed

…

server.py

Fix error in is_mine_id when encountering a malformed ID (#13746)

2022-09-08 15:54:36 +01:00

types.py

Accept & store thread IDs for receipts (implement MSC3771). (#13782)

2022-09-23 14:33:28 +00:00

visibility.py

Add some miscellaneous comments around sync (#13474)

2022-08-10 12:58:20 +01:00