Commit Graph

6094 Commits (travis/msc/inline-widgets)
 

Author SHA1 Message Date
Patrick Cloke 1be4019a62 Clarify implications of signing events. 3 years ago
Patrick Cloke 182c806bc4 Clarify what happens if a homeserver cannot verify membership. 3 years ago
Patrick Cloke 87f993820d Use a different room version to specify changes in join rules. 3 years ago
Patrick Cloke 808bb1bc5a Pull note about ban & ACLs out of each join rule description. 3 years ago
Patrick Cloke 42a34de18d Clarify that signature checks only apply to joining users. 3 years ago
Patrick Cloke 69aec559ac
Clarify soft-failure is extension of current algorithm.
Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>
3 years ago
Patrick Cloke 6d041d4dd9
Fix typos.
Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>
3 years ago
Alexey Rusakov c1169424a3 sso_login_redirect: Fix a copy-pasted operationId 3 years ago
Travis Ralston 7aecdbe2f5
Merge pull request #2778 from matrix-org/hs/proposal-appservice-login
MSC2778: Providing authentication method for appservice users
3 years ago
Travis Ralston ec2c1f6f53 Remove what appears to be leftover notes 3 years ago
Travis Ralston ea19271af2 Merge branch 'master' into hs/proposal-appservice-login 3 years ago
Travis Ralston fb091fed03
Apply suggestions from code review
Co-authored-by: Hubert Chathi <hubert@uhoreg.ca>
Co-authored-by: penn5 <penn5@users.noreply.github.com>
Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
3 years ago
Travis Ralston a330dee081 Changelog for https://github.com/matrix-org/matrix-doc/pull/3225 3 years ago
Travis Ralston 56a86e428f
Merge pull request #3225 from sideshowbarker/client-server-api-Access-Control-Allow-Headers-drop-Options-Accept
Drop Origin & Accept from Access-Control-Allow-Headers value
3 years ago
Travis Ralston 5578eba423
Merge pull request #3228 from ilovecommits/patch-1
Correct 'once-off' to 'one-off'
3 years ago
Travis Ralston 08cddf0b03 changelog for https://github.com/matrix-org/matrix-doc/pull/3254 3 years ago
Patrick Cloke e5305a72f2 Clarifications / simplifications. 3 years ago
Patrick Cloke b4296efa54 Remove the authorised servers list. 3 years ago
Christian Paul d86f8aa3d7
Add "knock" membership to /members endpoint (#3254) 3 years ago
Travis Ralston ecd28fe595
Merge pull request #3173 from matrix-org/clokep/stripped-state
MSC3173: Expose stripped state events to any potential joiner
3 years ago
Patrick Cloke 0b499321dc
Clarifications.
Co-authored-by: Jonathan de Jong <jonathandejong02@gmail.com>
3 years ago
Patrick Cloke 8e0b001486 Add a note about ensuring each allowed room has at least one server in it. 3 years ago
Patrick Cloke 3bab6bd9e1 Remove via field. 3 years ago
Patrick Cloke 39fdfa3fcb Add a list of trusted servers. 3 years ago
Travis Ralston cd6441c34a
Merge pull request #3251 from matrix-org/dependabot/npm_and_yarn/postcss-7.0.36
Bump postcss from 7.0.32 to 7.0.36
3 years ago
dependabot[bot] 721d4edb34
Bump postcss from 7.0.32 to 7.0.36
Bumps [postcss](https://github.com/postcss/postcss) from 7.0.32 to 7.0.36.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/7.0.32...7.0.36)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
Travis Ralston 0fd85edb35
Merge pull request #3250 from matrix-org/jryans/mobile-toc-overlap
Fix sidebar overlap for small width devices
3 years ago
J. Ryan Stinnett 8451c23154 Fix sidebar overlap for small width devices
This resolves a jarring text overlap issue with the sidebar by only adjusting
the `max-height` at larger widths, which matches the original rule being
overridden.

Fixes https://github.com/matrix-org/matrix-doc/issues/3049
3 years ago
Patrick Cloke 91c7612716 Handle feedback from Travis. 3 years ago
Patrick Cloke 39b9a9d582 Clarify security concerns. 3 years ago
Patrick Cloke bfa0dfe600 Clarify auth rules for restrictedjoin rules. 3 years ago
Patrick Cloke ed679c71f5 Clarify membership checking over federation. 3 years ago
Patrick Cloke f3e7fba85f Re-iterate that ban and server-acls matter. 3 years ago
Patrick Cloke 5a58af676e Namespace the allow type. 3 years ago
Travis Ralston c95aa1c250
Merge pull request #2732 from uhoreg/fallback_keys
MSC2732: Olm fallback keys
3 years ago
Travis Ralston e606218dd1
Merge pull request #3241 from matrix-org/dependabot/npm_and_yarn/glob-parent-5.1.2
Bump glob-parent from 5.1.1 to 5.1.2
3 years ago
dependabot[bot] f493778f8d
Bump glob-parent from 5.1.1 to 5.1.2
Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/gulpjs/glob-parent/releases)
- [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md)
- [Commits](https://github.com/gulpjs/glob-parent/compare/v5.1.1...v5.1.2)

---
updated-dependencies:
- dependency-name: glob-parent
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
Patrick Cloke 7061e199e0 Add a type field. 3 years ago
Patrick Cloke 1d1d356aca Space -> room. 3 years ago
Travis Ralston bc915e276b
Merge pull request #3233 from matrix-org/hs/explicit-room-id-for-tombstones
Explicitly call replacement_room a room ID
3 years ago
Will Hunt 524c55208a
Create 3233.clarification 3 years ago
Will Hunt 1694146bee
Explicitly call replacement_room a room ID
Fixes https://github.com/matrix-org/matrix-doc/issues/3232
3 years ago
Patrick Cloke 8a3ad47175 A bit less passive. 3 years ago
Patrick Cloke e81686c7d0 Many clarifications. 3 years ago
Patrick Cloke 41dd06d355 Clarify an edge case. 3 years ago
Patrick Cloke c1eb461c8c Remove bit about user IDs being listed directly. 3 years ago
Patrick Cloke c7ab867cef Fix broken backlink. 3 years ago
Patrick Cloke 0f4961118e Remove spaces summary changes. 3 years ago
Michael[tm] Smith 24810745c2
Drop Origin & Accept from Access-Control-Allow-Headers value
This change drops the Origin and Accept header names from the
recommended value for the CORS Access-Control-Allow-Headers header. Per
the CORS protocol, it’s not necessary or useful to include them.

Per-spec at https://fetch.spec.whatwg.org/#forbidden-header-name, Origin
is a “forbidden header name” set by the browser and that frontend
JavaScript code is never allowed to set.

So the value of Access-Control-Allow-Headers isn’t relevant to Origin or
in general to other headers set by the browser itself — the browser
never ever consults the Access-Control-Allow-Headers value to confirm
that it’s OK for the request to include an Origin header.

And per-spec at https://fetch.spec.whatwg.org/#cors-safelisted-request-header,
Accept is a “CORS-safelisted request-header”, which means that browsers
allow requests to contain the Accept header regardless of whether the
Access-Control-Allow-Headers value contains "Accept".

So it’s unnecessary for the Access-Control-Allow-Headers to explicitly
include Accept. Browsers will not perform a CORS preflight for requests
containing an Accept request header.

Related: Related: https://github.com/matrix-org/synapse/pull/10114

Signed-off-by: Michael[tm] Smith <mike@w3.org>
3 years ago
Patrick Cloke 5204b85f59 Remove unstable prefixes. 3 years ago