Commit Graph

6097 Commits (old_master)
 

Author SHA1 Message Date
Patrick Cloke e81686c7d0 Many clarifications. 3 years ago
Patrick Cloke 41dd06d355 Clarify an edge case. 3 years ago
Patrick Cloke c1eb461c8c Remove bit about user IDs being listed directly. 3 years ago
Patrick Cloke c7ab867cef Fix broken backlink. 3 years ago
Patrick Cloke 0f4961118e Remove spaces summary changes. 3 years ago
Michael[tm] Smith 24810745c2
Drop Origin & Accept from Access-Control-Allow-Headers value
This change drops the Origin and Accept header names from the
recommended value for the CORS Access-Control-Allow-Headers header. Per
the CORS protocol, it’s not necessary or useful to include them.

Per-spec at https://fetch.spec.whatwg.org/#forbidden-header-name, Origin
is a “forbidden header name” set by the browser and that frontend
JavaScript code is never allowed to set.

So the value of Access-Control-Allow-Headers isn’t relevant to Origin or
in general to other headers set by the browser itself — the browser
never ever consults the Access-Control-Allow-Headers value to confirm
that it’s OK for the request to include an Origin header.

And per-spec at https://fetch.spec.whatwg.org/#cors-safelisted-request-header,
Accept is a “CORS-safelisted request-header”, which means that browsers
allow requests to contain the Accept header regardless of whether the
Access-Control-Allow-Headers value contains "Accept".

So it’s unnecessary for the Access-Control-Allow-Headers to explicitly
include Accept. Browsers will not perform a CORS preflight for requests
containing an Accept request header.

Related: Related: https://github.com/matrix-org/synapse/pull/10114

Signed-off-by: Michael[tm] Smith <mike@w3.org>
3 years ago
Patrick Cloke 5204b85f59 Remove unstable prefixes. 3 years ago
Patrick Cloke 122c803f35 Rework this (again) to remove the API based on conversations with the SCT. 3 years ago
Patrick Cloke b94d379921 Add federation and reword a bit. 3 years ago
ilovecommits fee59e306d
Correct 'once-off' to 'one-off' 3 years ago
Travis Ralston d80939a9b9
Merge pull request #3218 from matrix-org/dependabot/npm_and_yarn/browserslist-4.16.6
Bump browserslist from 4.14.0 to 4.16.6
3 years ago
dependabot[bot] 8253c07dd0
Bump browserslist from 4.14.0 to 4.16.6
Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.14.0 to 4.16.6.
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](https://github.com/browserslist/browserslist/compare/4.14.0...4.16.6)

Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
Travis Ralston eb6f9246ad
Merge pull request #3176 from matrix-org/travis/clarification/lowercasing
Case fold instead of lowercase
3 years ago
Travis Ralston 8810f59207
Update 3167.clarification 3 years ago
Patrick Cloke b5d096957e Clarify examples. 3 years ago
Patrick Cloke 4b7dc17fbe Include an API endpoint. 3 years ago
Hubert Chathi 71a9bef12a
Merge pull request #3207 from toadjaune/patch-2
Fix a typo in event soft rejection schema
3 years ago
Hubert Chathi 43e471faca
Add changelog 3 years ago
Hubert Chathi 4beb86992b
Fix broken ASCII art 3 years ago
Hubert Chathi 701ca0f475
Merge pull request #3199 from uhoreg/deprecate_verification_start_spec
Deprecate verifications that don't begin with a request.
3 years ago
Arnaud Venturi fd84bd7217
Fix a typo in event soft rejection schema
Signed-off-by: Arnaud Venturi <github@toadjaune.eu>
3 years ago
Patrick Cloke 6923606e43 Clarify what changes are being proposed. 3 years ago
Hubert Chathi 78adb21455 add changelog 3 years ago
Hubert Chathi e201f4977e Deprecate verifications that don't begin with a request. 3 years ago
Patrick Cloke 29e4006f3c
Fix typo.
Co-authored-by: Travis Ralston <travpc@gmail.com>
3 years ago
Travis Ralston 60566bf0e4 iterate 3 years ago
Travis Ralston 9dc3830e92 Merge branch 'master' into travis/clarification/lowercasing 3 years ago
Patrick Cloke c44998cb66 Fix awkward wording. 3 years ago
Patrick Cloke b1051e42cb Various clarifications based on feedback. 3 years ago
Patrick Cloke d069ca2854 Also include the room topic. 3 years ago
Patrick Cloke 3fe5ca96b3 Wrap text. 3 years ago
Patrick Cloke d879eb6e00
Rename encrypted status to encryption information.
Co-authored-by: Travis Ralston <travpc@gmail.com>
3 years ago
Travis Ralston 55c2866ef3
Merge pull request #3195 from matrix-org/travis/msc1772-7E
Change space's valid `order` range to 0x7E
3 years ago
Travis Ralston d7219fb67e Change space's valid `order` range to 0x7E
0x7F is DEL, which is clearly not intended by the proposal text.
3 years ago
Andrew Morgan cea6622df8
Clarify that implementations can use stable prefixes once an MSC has merged (#3179)
Fixes #3146.

This PR changes the Matrix Spec Proposals page to clarify that implementations **do not** need to wait until a spec release to use stable prefixes, but that they can do so after the corresponding MSC has been merged. The justification is that once an MSC has been merged, it's fairly guaranteed that it will land in the spec. Yet it will take time for the spec release process to run its course, and we shouldn't make implementations wait for that.

The exception to this is if implementating a feature in a backwards-compatible way requires a new spec version to indicate to clients/servers that a feature has been added/changed. This situation is rare though, and most implementations won't fall into this category.
3 years ago
Patrick Cloke 4eeb27f467 Add more notes about edge-cases. 3 years ago
Patrick Cloke cbc4515a94 Spacing. 3 years ago
Patrick Cloke 590b7a48e7 Fill in the TODO about what how to mark access via spaces for the summary API. 3 years ago
Will Hunt f9a5b34099
Clarify /register / /login 3 years ago
Patrick Cloke 5afe23a1c0 More wrapping. 3 years ago
Patrick Cloke fab5eaa67b Add notes from @madlittlemods. 3 years ago
Patrick Cloke 84331fc3b6 Re-arrange security impact of knocking. 3 years ago
Patrick Cloke 62e94c5fe4 Remove security considerations (moved to MSC3083). 3 years ago
Patrick Cloke 2919e57525 Update dependencies to include MSC3173. 3 years ago
Patrick Cloke 45bcd86dcb Strip whitespace. 3 years ago
Travis Ralston ad32eb0029 Update i18n 3 years ago
Travis Ralston eb24928c8e
Merge pull request #3191 from RiotTranslateBot/weblate-matrix-doc-sas-emoji-v1
Translations update from Weblate
3 years ago
Weblate 10c606ecc5 Merge branch 'origin/master' into Weblate. 3 years ago
Travis Ralston 33b42be0a9
Merge pull request #3190 from matrix-org/dependabot/npm_and_yarn/lodash-4.17.21
Bump lodash from 4.17.20 to 4.17.21
3 years ago
dependabot[bot] a82313848f
Bump lodash from 4.17.20 to 4.17.21
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.20...4.17.21)

Signed-off-by: dependabot[bot] <support@github.com>
3 years ago