mirror of
https://github.com/matrix-org/matrix-spec
synced 2026-06-14 12:17:46 +02:00
Replace outdated statement that messages are not encrypted
Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>
This commit is contained in:
parent
160339e580
commit
018d5bbab3
|
|
@ -454,8 +454,7 @@ status code of 400.
|
||||||
|
|
||||||
#### Security considerations
|
#### Security considerations
|
||||||
|
|
||||||
Messages sent using this module are not encrypted, although end to end
|
Messages sent using this module MAY be encrypted, see [End-to-End Encryption](#end-to-end-encryption).
|
||||||
encryption is in development (see [E2E module](#end-to-end-encryption)).
|
|
||||||
|
|
||||||
Clients should sanitise **all displayed keys** for unsafe HTML to
|
Clients should sanitise **all displayed keys** for unsafe HTML to
|
||||||
prevent Cross-Site Scripting (XSS) attacks. This includes room names and
|
prevent Cross-Site Scripting (XSS) attacks. This includes room names and
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue