Federation requests must be for local users. (#1672)

This is already mentioned for /user/devices, but is not mentioned for /query/profile, /user/keys/claim, or /user/keys/query.

See GHSA-mp92-3jfm-3575 for an issue found with this in Synapse.
This commit is contained in:
Patrick Cloke 2023-11-14 11:15:57 -05:00 committed by GitHub
parent 7b72c42ba6
commit 161a4a2cfb
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 6 additions and 3 deletions

View file

@ -0,0 +1 @@
Clarify that federation requests for non-local users are invalid.