synapse-product/synapse/http
Denis Kasak 337f38cac3
Implement a content type allow list for URL previews (#11936)
This implements an allow list for content types for which Synapse will attempt URL preview. If a URL resolves to a resource with a content type which isn't in the list, the download will terminate immediately.

This makes sense given that Synapse would never successfully generate a URL preview for such files in the first place, and helps prevent issues with streaming media servers, such as #8302.

Signed-off-by: Denis Kasak dkasak@termina.org.uk
2022-02-10 15:43:01 +00:00
..
federation Add missing type hints to synapse.logging.context (#11556) 2021-12-14 17:35:28 +00:00
__init__.py Add missing type hints to synapse.http. (#11571) 2021-12-14 07:00:47 -05:00
additional_resource.py Add missing type hints to synapse.http. (#11571) 2021-12-14 07:00:47 -05:00
client.py Implement a content type allow list for URL previews (#11936) 2022-02-10 15:43:01 +00:00
connectproxyclient.py Use auto_attribs/native type hints for attrs classes. (#11692) 2022-01-13 13:49:28 +00:00
matrixfederationclient.py Use auto_attribs/native type hints for attrs classes. (#11692) 2022-01-13 13:49:28 +00:00
proxyagent.py Additional type hints for the proxy agent and SRV resolver modules. (#10608) 2021-08-18 13:53:20 -04:00
request_metrics.py Type hints for the remaining two files in synapse.http. (#11164) 2021-10-28 14:14:42 +01:00
server.py Convert all namedtuples to attrs. (#11665) 2021-12-30 18:47:12 +00:00
servlet.py Add missing type hints to synapse.http. (#11571) 2021-12-14 07:00:47 -05:00
site.py Don't print HTTPStatus.* in "Processed..." logs (#11827) 2022-01-26 12:47:34 +00:00