Search results

Why don't we validate the JSON that clients submit for core event types like m.room.join_rules (SYN-720)

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

T-EnhancementNew features, changes in functionality, improvements in performance, or user-facing enhancements.New features, changes in functionality, improvements in performance, or user-facing enhancements.

Status: Open.

#1391 In matrix-org/synapse;

· matrixbot opened on Jul 3, 2016

Federation 'send_join' is insufficiently pedantic (SYN-507)

A-Federated-Joinjoins over federation generally suckjoins over federation generally suck

A-Spec-Complianceplaces where synapse does not conform to the specplaces where synapse does not conform to the spec

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

O-UncommonMost users are unlikely to come across this or unexpected workflowMost users are unlikely to come across this or unexpected workflow

S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Z-CleanupThings we want to get rid of, but aren't actively causing painThings we want to get rid of, but aren't actively causing pain

Status: Open.

#1407 In matrix-org/synapse;

· matrixbot opened on Oct 27, 2015

Setting receipts from client doesn't mind syntactically-invalid event IDs (SYN-512)

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

O-UncommonMost users are unlikely to come across this or unexpected workflowMost users are unlikely to come across this or unexpected workflow

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#1412 In matrix-org/synapse;

· matrixbot opened on Nov 3, 2015

 ·  

Validate data passed to REST endpoints

Consider better error for username availability check invalid input

A-RegistrationCreating an accountCreating an account

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

O-OccasionalAffects or can be seen by some users regularly or most users rarelyAffects or can be seen by some users regularly or most users rarely

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#2397 In matrix-org/synapse;

· t3chguy opened on Jul 31, 2017

Cannot start a chat with a user if domain contains uppercases

A-Create-Room

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#1999 In matrix-org/synapse;

· sabrinaj opened on Mar 14, 2017

It is possible to set a stupidly long displayname

A-Membership

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

P4(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

Security

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#5079 In matrix-org/synapse;

· richvdh opened on Apr 18, 2019

500 error when attempting to accept invite from unreachable server

A-Federation

A-InviteInviting users to rooms and accepting invitesInviting users to rooms and accepting invites

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

O-UncommonMost users are unlikely to come across this or unexpected workflowMost users are unlikely to come across this or unexpected workflow

S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#4665 In matrix-org/synapse;

· Valodim opened on Feb 18, 2019

Synapse 500s when /createRoom is given with a full alias instead of the alias's localpart

A-Create-Room

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

O-UncommonMost users are unlikely to come across this or unexpected workflowMost users are unlikely to come across this or unexpected workflow

S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#5127 In matrix-org/synapse;

· babolivier opened on May 2, 2019

 ·  

Validate data passed to REST endpoints

Synapse 500's on syncing with an empty sync token

A-Syncdefects related to /syncdefects related to /sync

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#6030 In matrix-org/synapse;

· anoadragon453 opened on Sep 12, 2019

server_name is not correctly validated for join requests

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

z-bug(Deprecated Label)(Deprecated Label)

z-p2(Deprecated Label)(Deprecated Label)

Status: Open.

#7108 In matrix-org/synapse;

· grinapo opened on Mar 19, 2020

psycopg2.errors.UniqueViolation: duplicate key value violates unique constraint "e2e_one_time_keys_json_uniqueness"

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

O-UncommonMost users are unlikely to come across this or unexpected workflowMost users are unlikely to come across this or unexpected workflow

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

z-bug(Deprecated Label)(Deprecated Label)

z-p2(Deprecated Label)(Deprecated Label)

Status: Open.

#7365 In matrix-org/synapse;

· anoadragon453 opened on Apr 29, 2020

Synapse allows invalid characters in the signature key id

A-Spec-Complianceplaces where synapse does not conform to the specplaces where synapse does not conform to the spec

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Z-CleanupThings we want to get rid of, but aren't actively causing painThings we want to get rid of, but aren't actively causing pain

Status: Open.

#8307 In matrix-org/synapse;

· timokoesters opened on Sep 13, 2020

 ·  

Validate data passed to REST endpoints