3 people cbc6934821 Prevent theft of room aliases via remote join to room with illegitimate predecessor ...

Fixes: https://github.com/element-hq/synapse/security/advisories/GHSA-cjh7-rcpx-xpf8
Fixes: https://github.com/matrix-org/internal-config/issues/1729

---------

Co-authored-by: Eric Eastwood <erice@element.io>
Reviewed-on: https://github.com/element-hq/synapse-private/pull/136

2026-07-28 13:58:06 +01:00

..

transport

Fix up event-construction in tests ahead of the Rust event port (#19781)

2026-05-15 10:12:42 +01:00

__init__.py

Implementation of server_acls

2018-07-04 19:06:20 +01:00

_remote_join.py

Prevent theft of room aliases via remote join to room with illegitimate predecessor

2026-07-28 13:58:06 +01:00

test_complexity.py

Format files with Ruff (#17643)

2024-09-02 12:39:04 +01:00

test_federation_base.py

Fix up event-construction in tests ahead of the Rust event port (#19781)

2026-05-15 10:12:42 +01:00

test_federation_catch_up.py

Write union types as X | Y where possible (#19111)

2025-11-06 14:02:33 -06:00

test_federation_client.py

Fix up event-construction in tests ahead of the Rust event port (#19781)

2026-05-15 10:12:42 +01:00

test_federation_devices.py

Introduce Clock.call_when_running(...) to include logcontext by default (#18944)

2025-09-22 10:27:59 -05:00

test_federation_join_upgraded_room.py

Prevent theft of room aliases via remote join to room with illegitimate predecessor

2026-07-28 13:58:06 +01:00

test_federation_media.py

Implement synapse issue #16751: Treat local_media_directory as optional storage provider (#19204)

2026-01-06 23:29:58 +00:00

test_federation_out_of_band_membership.py

Fix up event-construction in tests ahead of the Rust event port (#19781)

2026-05-15 10:12:42 +01:00

test_federation_sender.py

Update FakeChannel.await_result(...) to drive async Rust (Tokio runtime/thread pool) (#19879)

2026-07-07 04:07:19 -05:00

test_federation_server.py

Add missing 'event in expected room' check on /event_auth

2026-07-28 13:58:06 +01:00