Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

m.room.power_levels provide no way of restricting the media (via mixins) you can embed into events. #1932

Open
Gnuxie opened this issue Aug 16, 2024 · 0 comments
Labels
improvement An idea/future MSC for the spec

Comments

@Gnuxie
Copy link
Contributor

Gnuxie commented Aug 16, 2024

A security/potential problem that was missed in matrix-org/matrix-spec-proposals#1767 (comment).

m.room.message doesn't let you do this either, and that's why Mjolnir has protections for removing voice messages and other media automatically.

@Gnuxie Gnuxie added the improvement An idea/future MSC for the spec label Aug 16, 2024
@Gnuxie Gnuxie changed the title m.room.power_levels provide no way of restricting what media (via mixins) you can embed into events. m.room.power_levels provide no way of restricting the media (via mixins) you can embed into events. Aug 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
improvement An idea/future MSC for the spec
Projects
None yet
Development

No branches or pull requests

1 participant