From 6fe4ba72da515f3e473be42a57a7a32f03e303f8 Mon Sep 17 00:00:00 2001 From: Erik Johnston Date: Fri, 30 Aug 2024 10:59:21 +0100 Subject: [PATCH] Add security and unstable prefix --- proposals/4186-simplified-sliding-sync.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/proposals/4186-simplified-sliding-sync.md b/proposals/4186-simplified-sliding-sync.md index 9c6d7379d..275512a7c 100644 --- a/proposals/4186-simplified-sliding-sync.md +++ b/proposals/4186-simplified-sliding-sync.md @@ -370,3 +370,15 @@ indicate to the client that the user has effectively left the room (the server h We may want to allow special entries in the `required_state` list of the form `{"type": .., "state_key": .., content: null}` to indicate that the state entry has been removed. + + +# Security considerations + +Care must be taken, as with sync v2, to ensure that only the data that the user is authorized to see is returned in the +response. + + +# Unstable prefix + +The unstable URL for simplified sliding sync is `/org.matrix.simplified_msc3575/sync`. The flag in `/versions` is +`org.matrix.simplified_msc3575`.