Skip to content
Snippets Groups Projects
Forked from Maunium / synapse
9513 commits behind the upstream repository.
  • Andrew Morgan's avatar
    e08ea434
    Use the federation blacklist for requests to untrusted Identity Servers (#6000) · e08ea434
    Andrew Morgan authored
    Uses a SimpleHttpClient instance equipped with the federation_ip_range_blacklist list for requests to identity servers provided by user input. Does not use a blacklist when contacting identity servers specified by account_threepid_delegates. The homeserver trusts the latter and we don't want to prevent homeserver admins from specifying delegates that are on internal IP addresses.
    
    Fixes #5935
    e08ea434
    History
    Use the federation blacklist for requests to untrusted Identity Servers (#6000)
    Andrew Morgan authored
    Uses a SimpleHttpClient instance equipped with the federation_ip_range_blacklist list for requests to identity servers provided by user input. Does not use a blacklist when contacting identity servers specified by account_threepid_delegates. The homeserver trusts the latter and we don't want to prevent homeserver admins from specifying delegates that are on internal IP addresses.
    
    Fixes #5935
6000.feature 63 B