synapse/changelog.d/15680.bugfix at d53547352063c3e66302f7bdc40d7ac7270e605c - mirrors/synapse - Sadium Git

mirrors/synapse

mirror of https://github.com/element-hq/synapse.git synced 2024-11-25 11:05:49 +03:00

Josh Qou d939120421

Fix unsafe hotserving behaviour for non-multimedia uploads. (#15680 )

* Fix unsafe hotserving behaviour for non-multimedia uploads.

* invert disposition assert

* test_media_storage.py: run lint

* test_base.py: /inline/attachment/s

* Only return attachment for disposition type, update tests

* Update synapse/media/_base.py

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>

* Update changelog.d/15680.bugfix

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>

* add attribution

* Update changelog.

---------

Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>

2023-06-15 14:23:27 +01:00

1 line

100 B

Text

Raw Blame History

Fix a long-standing bug where media files were served in an unsafe manner. Contributed by @joshqou.