Eric Eastwood 6f9fab1089 Fix open redirect in legacy SSO flow (idp) (#18909) ...

- Validate the `idp` parameter to only accept the ones that are known in
the config file
- URL-encode the `idp` parameter for safety's sake (this is the main
fix)

Fix https://github.com/matrix-org/internal-config/issues/1651 (internal
link)

Regressed in https://github.com/element-hq/synapse/pull/17972

2025-09-17 13:54:47 -05:00

..

__init__.py

Test ratelimiter

2014-09-02 15:16:26 +01:00

test_auth.py

Use twisted.internet.testing module in tests instead of deprecated twisted.test.proto_helpers. (#18728)

2025-07-30 12:32:10 +01:00

test_errors.py

Stabilize support for Retry-After header (MSC4014) (#16947)

2024-03-08 09:33:46 +00:00

test_filtering.py

Use twisted.internet.testing module in tests instead of deprecated twisted.test.proto_helpers. (#18728)

2025-07-30 12:32:10 +01:00

test_ratelimiting.py

Refactor cache metrics to be homeserver-scoped (#18604)

2025-07-16 16:04:57 -05:00

test_urls.py

Fix open redirect in legacy SSO flow (idp) (#18909)

2025-09-17 13:54:47 -05:00