Erwan Leboucher
7d8a5f6bab
fix(media): Preserve remote preview dimensions without decoding images
2026-10-03 15:35:18 +00:00
Erwan Leboucher
de578c2163
fix(media): Validate preview image downloads
2026-10-03 15:35:18 +00:00
timedout
c94fa39fd1
fix: Don't panic when a join doesn't include a create event
2026-10-03 15:19:10 +00:00
Ginger
2773ff3e16
feat: Import images correctly from OIDC claims
2026-10-03 15:04:07 +00:00
Ginger
6bbea25034
feat: Allow configuring additional trusted OIDC audiences
2026-10-03 15:03:47 +00:00
Ginger
39bee607c0
refactor: Remove recaptcha-verify
2026-10-03 15:03:34 +00:00
timedout
935ddf1d0f
style: Change Allow to Default etc
...
`ExplicitAllow` -> `Allow`
2026-10-02 18:10:18 +01:00
timedout
495eeedd24
style: Don't return Allow in an else block
2026-10-02 18:10:17 +01:00
timedout
63294f8775
fix: Inverted check
2026-10-02 18:10:17 +01:00
timedout
43ee11bb00
feat: Support MSC4494
2026-10-02 18:10:17 +01:00
Ginger
f1d9537b14
fix: Fix startup panic in old migrations
2026-10-02 11:41:37 -04:00
Ginger
cb7af18bc2
fix: Make unembed_unsigned_info infallible
2026-10-01 18:43:54 +00:00
Ginger
a6fae7498d
fix: Don't bump version if it's already bumped
2026-10-01 18:43:54 +00:00
Ginger
48c36d6f17
refactor: Remove some unnecessary macro logic
2026-10-01 18:43:54 +00:00
Ginger
23d07e3d4f
refactor: Clean up migration logic
2026-10-01 18:43:54 +00:00
Ginger
931686e84e
fix: Fix panic in room creation
2026-09-30 18:49:03 +00:00
Ginger
eb602e83a1
chore: Fix clippy lints
2026-09-30 14:47:46 -04:00
timedout
58d135bc57
fix: Return the actual state at in !admin debug get-state-at
...
Previously this command actually returned the state *before*, which made debugging with it confusing.
2026-09-29 22:06:48 +01:00
Clubs
684820c7c1
fix: check for user account status before attemping to process email change.
2026-09-29 18:36:35 +00:00
Ginger
cbdf978b84
fix: Preserve custom fields in create event content
2026-09-29 17:52:32 +00:00
Ginger
38b7987335
fix: Add invitees as creators for v12+ trusted private chats
2026-09-29 17:52:32 +00:00
timedout
550dd0160a
fix: SEC8
...
Reviewed-By: Ginger <ginger@gingershaped.computer >
Reviewed-By: Jade <jade@ellis.link >
Reviewed-By: Jacob Taylor <jacob@explodie.org >
2026-09-28 02:00:37 +01:00
timedout
c0ad864d57
fix: Make unembed unsigned run in bg
2026-09-27 22:58:08 +01:00
timedout
a61026912c
feat: Add a migration to fix up unsigned data
2026-09-27 18:31:46 +01:00
timedout
05d6922351
style: Take an optional context instead of deconstructed parameters
2026-09-27 17:33:26 +01:00
timedout
f0a0596d12
fix: Remove undocumented prev_sender unsigned field
2026-09-27 17:32:47 +01:00
timedout
fbedf994db
fix: Don't unnecessarily embed prev_content in populate_unsigned
2026-09-27 17:32:47 +01:00
timedout
1de16fed9e
style: English is a difficult language
2026-09-27 17:32:47 +01:00
timedout
4812837d13
fix: Don't allow set_unsigned to panic
...
While an error in this function is probably bad, detonating a metric tonne of TNT on the call tree is probably worse
2026-09-27 17:32:47 +01:00
timedout
90793eaaf4
fix: Actually set unsigned in PDU after set_unsigned
2026-09-27 17:32:47 +01:00
timedout
744928b206
style: Update docstring for Pdu.set_unsigned
2026-09-27 17:32:47 +01:00
timedout
05ee24df7d
fix: Move helper to helpers.rs, rename field, don't recurse unsigned in redacted_because
...
Renamed `redacted_because_id` to `org.continuwuity.redacted_by` for proper namespacing; `get_unsigned_context` now lives in helpers.rs instead of `mod.rs`. The helper function also now explicitly wipes `unsigned` for `redacted_because` to avoid leaks (see comment).
2026-09-27 17:32:46 +01:00
timedout
89eecd2bf7
fix: Record redacted_because_id instead of redacted_because
2026-09-27 17:32:46 +01:00
timedout
b2072baf59
perf: Strip unsigned over federation and generate it on the fly locally
2026-09-27 17:32:46 +01:00
timedout
286897de88
feat: Don't send unsigned data over federation
2026-09-27 17:32:46 +01:00
Renovate Bot and Ginger
02d245afe5
chore(deps): Update ruma digest to e7384f0
...
Co-authored-by: Ginger <ginger@gingershaped.computer >
2026-09-24 14:16:55 -04:00
Ginger
4ea4e15edb
chore: Reformat with latest nightly
2026-09-24 09:53:59 -04:00
Erwan Leboucher
cee69b4c8d
fix: Walk auth events once instead of re-queueing parents
2026-09-22 21:19:25 +02:00
timedout
d3ed175264
fix(stateres): Inject dummy create event when none is available
...
I'm not sure how this doesn't cause more panics. When running an auth check on the create event during iterative auth checks, there's obviously no create event in the base state nor auth map, so the call to fetch_state() will return nothing and thus panic.
This just inserts the incoming event if it's a create event and there isn't an existing one in the auth state. It's not used for the create event checks anyway so this has no effect aside from plugging the panic.
2026-09-22 02:04:39 +01:00
timedout
7924e96589
chore: add todo to fix
2026-09-22 00:16:27 +00:00
timedout
d1b1274900
style: Unchain if statement
2026-09-22 00:16:27 +00:00
timedout
6299df3552
style: Document fetch_and_handle_auth_events control flow
2026-09-22 00:16:27 +00:00
Erwan Leboucher
20d146bd5e
fix: Throttle client-triggered remote event fetches
2026-09-22 00:16:27 +00:00
Erwan Leboucher
03f60c7002
fix: Don't re-fetch auth events that can never be resolved
2026-09-22 00:16:27 +00:00
Erwan Leboucher
ed1e634579
feat(push): Add MSC4174 web push
2026-09-21 23:35:05 +00:00
timedout
8891adfba3
fix(stateres): Enforce state ownership checks against creators too
...
Previously being a room creator short-circuited the `can_send_event`
check, which allowed creators to send state events "owned" (state key
starting with @ but not being the sender's user ID), in effect skipping
auth check 9 in v12 rooms. This removes that short circuit condition,
since `Infinite < Int` always returns false anyway, allowing the state
key check block to execute.
Fixes #2266
2026-09-18 18:57:57 +01:00
timedout
1a8e5ccc09
fix: Gracefully handle extremityless rooms when gapfilling
...
See also: #2259
2026-09-17 00:06:17 +01:00
Allinen
d52d5003b1
refactor: cleaned up code
2026-09-16 17:57:11 +00:00
Allinen
bdaa78340e
style: fix typo
2026-09-16 17:57:11 +00:00
Allinen
89e07ae239
feat(config): connection_uri_file added to config
2026-09-16 17:57:11 +00:00
Erwan Leboucher
timedout
Ginger
Clubs
Renovate BotandGinger
Allinen