Olivia Lee 0aae932bc9 validate additional fields for incoming remote membership ... This was missed in the initial fix in 9a50c244 ("validate event type and membership for create_join and create_invite"), but significantly less impactful than the original vulnerability because it only affects invite/join events that are able to pass auth/signature checks with our server's signature. You could use this to forge invite events from a local user, but not much else.		2025-12-30 17:48:33 -08:00
..
api	validate additional fields for incoming remote membership	2025-12-30 17:48:33 -08:00
cli	Remove support for MSC3575 (sliding sync)	2025-08-08 22:24:56 +02:00
config	Add admin commands to get and reset tracing filters	2025-02-17 17:41:14 +00:00
database	fix lints for upcoming 1.88.0 toolchain	2025-08-06 12:27:45 -07:00
service	Bump ruma to 2ea8b833e3a80c1d650964a1f3e83ee569cf5c0b (RoomVersion -> RoomVersionRules)	2025-08-30 18:37:54 +02:00
utils	Bump ruma to 2ea8b833e3a80c1d650964a1f3e83ee569cf5c0b (RoomVersion -> RoomVersionRules)	2025-08-30 18:37:54 +02:00
api.rs	serve well-known client and server config	2024-09-08 13:35:38 -07:00
cli.rs	don't check canonicalized paths while sandboxed	2025-03-21 16:25:42 -07:00
config.rs	Add configuration option to allow invalid TLS certificates	2025-08-22 02:03:01 -04:00
database.rs	add type-safe accessors to account_data service	2025-06-02 11:07:21 -07:00
error.rs	reject overlapping media and database paths	2025-03-20 11:33:59 -07:00
main.rs	fix lints for upcoming 1.88.0 toolchain	2025-08-06 12:27:45 -07:00
observability.rs	fix new lints from clippy 0.1.85	2025-08-06 12:27:45 -07:00
service.rs	reintroduce account_data::Service struct	2025-06-02 11:07:21 -07:00
utils.rs	remove unused lifetime parameter from utils::calculate_hash	2025-08-06 12:27:45 -07:00