Denis Kasak 337f38cac3 Implement a content type allow list for URL previews (#11936) ... This implements an allow list for content types for which Synapse will attempt URL preview. If a URL resolves to a resource with a content type which isn't in the list, the download will terminate immediately. This makes sense given that Synapse would never successfully generate a URL preview for such files in the first place, and helps prevent issues with streaming media servers, such as #8302. Signed-off-by: Denis Kasak dkasak@termina.org.uk		2022-02-10 15:43:01 +00:00
..
.gitignore	Correct attrs package name in requirements (#3492)	2018-07-07 10:46:59 +10:00
11114.bugfix	Fix historical messages backfilling in random order on remote homeservers (MSC2716) (#11114)	2022-02-07 15:54:13 -06:00
11215.feature	Send to-device messages to application services (#11215)	2022-02-01 14:13:38 +00:00
11615.misc	Allow specifying the application service-specific user_id parameter in the join test helper. (#11616)	2022-02-03 13:09:22 +00:00
11616.misc	Allow specifying the application service-specific user_id parameter in the join test helper. (#11616)	2022-02-03 13:09:22 +00:00
11655.feature	Add a background database update to purge account data for deactivated users. (#11655)	2022-02-02 11:37:18 +00:00
11660.misc	Fetch edits for multiple events in a single query. (#11660)	2022-02-08 07:43:30 -05:00
11832.misc	Fix type errors introduced by new annotations in the Prometheus Client library. (#11832)	2022-02-02 16:51:00 +00:00
11837.feature	Experimental support to include bundled aggregations in search results (MSC3666) (#11837)	2022-02-08 09:21:20 -05:00
11854.feature	Add a callback to allow modules to deny 3PID (#11854)	2022-02-08 11:20:32 +01:00
11856.misc	Add missing type hints to synapse.replication.http. (#11856)	2022-02-08 07:44:39 -05:00
11859.doc	Fix typo: unpind -> unbind (#11859)	2022-02-03 17:20:44 +00:00
11862.doc	Clarify that users' media are also preview images (#11862)	2022-02-04 14:39:14 +00:00
11867.feature	Update changelog from #11867 to be a single line.	2022-02-09 11:32:20 -05:00
11868.feature	Allow modules to retrieve server and worker names (#11868)	2022-02-01 16:23:55 +01:00
11869.misc	Fixes for opentracing scopes (#11869)	2022-02-02 22:41:57 +00:00
11870.misc	Improve opentracing for federation requests (#11870)	2022-02-03 12:29:16 +00:00
11876.misc	Describe prune_unread_entries in docstrings (#11876)	2022-02-02 15:11:23 +00:00
11878.misc	Invalidate the get_users_in_room{_with_profile} caches only when necessary. (#11878)	2022-02-02 12:24:07 -05:00
11880.misc	Convert ApplicationServiceTestCase to use simple_async_mock (#11880)	2022-02-01 17:45:13 +00:00
11884.misc	Revert experimental push rules from #7997. (#11884)	2022-02-02 09:49:31 -05:00
11888.misc	Disable coverage calculation for olddeps build. (#11888)	2022-02-02 15:59:33 +00:00
11890.bugfix	Fix losing incoming EDUs if debug logging enabled (#11890)	2022-02-02 16:25:17 +00:00
11892.feature	Add a ratelimiter for 3pid invite (#11892)	2022-02-03 14:28:15 +01:00
11895.removal	Remove support for the webclient listener. (#11895)	2022-02-03 18:36:49 +00:00
11907.doc	Delete MSC1711_certificates_FAQ.md (#11907)	2022-02-04 11:27:00 +00:00
11909.misc	Add a unit test for users receiving their own device list updates (#11909)	2022-02-07 13:21:19 +00:00
11910.misc	Run Complement tests sequentially (#11910)	2022-02-04 13:04:57 +00:00
11911.misc	Remove optional state of ApplicationService.is_interested's store parameter (#11911)	2022-02-07 18:26:42 +00:00
11912.misc	Add a docstring to add_device_change_to_streams and fix some nearby types (#11912)	2022-02-08 10:52:22 +00:00
11914.misc	Clean up an indirect reference to the homeserver datastore (#11914)	2022-02-07 13:25:09 +00:00
11927.misc	Pass the proper type when uploading files. (#11927)	2022-02-07 10:06:52 -05:00
11930.bugfix	Return JSON errors for unknown resources under /matrix/client. (#11930)	2022-02-08 07:06:25 -05:00
11936.bugfix	Implement a content type allow list for URL previews (#11936)	2022-02-10 15:43:01 +00:00
11938.misc	Add missing type hints to synapse.replication. (#11938)	2022-02-08 11:03:08 -05:00
11939.misc	Remove unnecessary ignores due to Twisted upgrade. (#11939)	2022-02-08 09:15:59 -05:00
11946.doc	Fix example for structured logging. (#11946)	2022-02-09 20:56:33 +00:00
11954.doc	Basic documentation for the release cycle. (#11954)	2022-02-10 13:15:10 +00:00
11955.doc	Fix broken link in README to admin API. (#11955)	2022-02-10 14:18:27 +00:00