synapse/changelog.d/8417.feature at c1ef579b63a39d8d6fb31ddc1d3cf173eaf7e5b7 - mirrors/synapse - Code den of a Norwegian 🐻

mirrors/synapse

mirror of https://github.com/element-hq/synapse.git synced 2024-12-15 17:51:10 +00:00

Andrew Morgan 1c6b8752b8

Only assert valid next_link params when provided (#8417 )

Broken in https://github.com/matrix-org/synapse/pull/8275 and has yet to be put in a release. Fixes https://github.com/matrix-org/synapse/issues/8418.

`next_link` is an optional parameter. However, we were checking whether the `next_link` param was valid, even if it wasn't provided. In that case, `next_link` was `None`, which would clearly not be a valid URL.

This would prevent password reset and other operations if `next_link` was not provided, and the `next_link_domain_whitelist` config option was set.

2020-09-29 12:36:44 +01:00

1 line

No EOL

132 B

Gherkin

Raw Blame History

Add a config option to specify a whitelist of domains that a user can be redirected to after validating their email or phone number.