mirror of
https://github.com/hoernschen/dendrite.git
synced 2025-07-30 04:52:46 +00:00
Return HTTP errors when trying to kick invalid users (#1221)
Room integrity was never compromised as GMSL does auth checks, but we would incorrectly 200 OK the request instead of 403ing.
This commit is contained in:
parent
61963a74ae
commit
c8d476a3cc
3 changed files with 12 additions and 4 deletions
|
@ -413,3 +413,5 @@ A full_state incremental update returns only recent timeline
|
|||
A prev_batch token can be used in the v1 messages API
|
||||
We don't send redundant membership state across incremental syncs by default
|
||||
Typing notifications don't leak
|
||||
Users cannot kick users from a room they are not in
|
||||
Users cannot kick users who have already left a room
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue