mirror of
https://git.anonymousland.org/anonymousland/synapse-product.git
synced 2024-12-17 17:54:20 -05:00
db868db594
This can happen specifically with an application service `/transactions/10722?access_token=leaked` request Fix https://github.com/matrix-org/synapse/issues/13010 --- Saw an example leak in https://github.com/matrix-org/synapse/issues/13423#issuecomment-1205348482 ``` 2022-08-04 14:47:57,925 - synapse.http.client - 401 - DEBUG - as-sender-signal-1 - Sending request PUT http://localhost:29328/transactions/10722?access_token=<redacted> 2022-08-04 14:47:57,926 - synapse.http.proxyagent - 223 - DEBUG - as-sender-signal-1 - Requesting b'http://localhost:29328/transactions/10722?access_token=leaked' via <HostnameEndpoint localhost:29328> ``` |
||
---|---|---|
.. | ||
federation | ||
__init__.py | ||
additional_resource.py | ||
client.py | ||
connectproxyclient.py | ||
matrixfederationclient.py | ||
proxyagent.py | ||
request_metrics.py | ||
server.py | ||
servlet.py | ||
site.py | ||
types.py |