dandri/continuwuity
1
0
Fork 0
mirror of https://forgejo.ellis.link/continuwuation/continuwuity/ synced 2026-04-13 00:45:40 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: Forbid creating events sent by remote users

Browse Source
This commit is contained in:
timedout
2026-04-05 22:18:05 +01:00
parent 3ab1f102dd
commit 688cd8f46a
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/service/rooms/timeline/create.rs
View File

@@ -81,6 +81,11 @@ fn from_evt(
))
}
}
if !self.services.globals.user_is_local(sender) {
return Err!(Request(Forbidden("Sender must be a local user")));
}
let PduBuilder {
event_type,
content,