This repository has been archived by the owner on Apr 26, 2024. It is now read-only.
Missing validation on typing EDUs #13869
Labels
A-Federation
O-Uncommon
Most users are unlikely to come across this or unexpected workflow
S-Tolerable
Minor significance, cosmetic issues, low or no impact to users.
T-Defect
Bugs, crashes, hangs, security vulnerabilities, or other reported issues.
When we receive a typing EDU from a remote homeserver, we neglect to check that said homeserver is in the room the typing EDU is for.
There was a check that looked like it was doing the job, except it was really checking that the local homeserver is in the room a second time:
synapse/synapse/handlers/typing.py
Lines 365 to 369 in 1a209ef
related: #11456
The text was updated successfully, but these errors were encountered: