Sprinkle some DANGER: UNSAFE warnings over the spec about event bodies

Specs [MSC2801](https://github.com/matrix-org/matrix-doc/pull/2801)
Based on https://github.com/matrix-org/matrix-doc/pull/3094
This commit is contained in:
Travis Ralston 2021-04-05 20:18:46 -06:00 committed by Richard van der Hoff
parent becd2257c0
commit 30f37f1e66
2 changed files with 24 additions and 0 deletions

View file

@ -1381,6 +1381,18 @@ opaque string. No changes should be required to support the currently
available room versions.
{{% /boxes/warning %}}
{{% boxes/warning %}}
Event bodies are considered untrusted data. This means that anyone using
Matrix must validate that the event body is of the expected shape/schema
before using the contents verbatim.
**It is not safe to assume that an event body will have all the expected
fields of the expected types.**
See [MSC2801](https://github.com/matrix-org/matrix-doc/pull/2801) for more
detail on why this assumption is unsafe.
{{% /boxes/warning %}}
### Types of room events
Room events are split into two categories: