archive
/
matrix-spec-proposals
mirror of https://github.com/matrix-org/matrix-spec-proposals
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

it's an implementation detail to decide when to error

Browse Source
travis/msc/search-redirect
Travis Ralston 1 year ago
parent 3a8be1e8ed
commit 40538c16f1
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File

2
proposals/4228-search-redirection.md
Unescape Escape View File

@ -53,6 +53,8 @@ For the federation endpoint specifically, the local user SHOULD have the remote
straight through to them, however some implementations may prefer to replace the error before serving straight through to them, however some implementations may prefer to replace the error before serving
it to their users. This can help reduce the potential of remote Cross-Server Scripting (XSS) attacks. it to their users. This can help reduce the potential of remote Cross-Server Scripting (XSS) attacks.
When to return `403 M_FORBIDDEN` is left as an implementation detail.
### Example ### Example
A user makes a request to `/_matrix/client/v3/publicRooms` with a search term of `something illegal`. A user makes a request to `/_matrix/client/v3/publicRooms` with a search term of `something illegal`.

Write Preview
Loading…
Cancel
Save