it's an implementation detail to decide when to error

1 year ago · 40538c16f1
parent 3a8be1e8ed
commit 40538c16f1
1 changed files with 2 additions and 0 deletions
--- a/proposals/4228-search-redirection.md
+++ b/proposals/4228-search-redirection.md
@ -53,6 +53,8 @@ For the federation endpoint specifically, the local user SHOULD have the remote
 straight through to them, however some implementations may prefer to replace the error before serving
 it to their users. This can help reduce the potential of remote Cross-Server Scripting (XSS) attacks.

+When to return `403 M_FORBIDDEN` is left as an implementation detail.
+
 ### Example

 A user makes a request to `/_matrix/client/v3/publicRooms` with a search term of `something illegal`.