Filip/matrix-spec
1
0
Fork 0
mirror of https://github.com/matrix-org/matrix-spec synced 2025-12-20 16:38:37 +01:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Merge pull request #2343 from matrix-org/travis/spec/fix-2120

Browse source 
Recommend that clients don't preview URLs in encrypted rooms
This commit is contained in:
Travis Ralston 2019-11-06 09:50:36 -07:00 committed by GitHub
parent cca92ea4f5 f012da17a1
commit 8e6e47ae7d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
api/client-server/content-repo.yaml
View file

@ -340,6 +340,16 @@ paths:
"/preview_url":
get:
summary: "Get information about a URL for a client"
description: |-
Get information about a URL for the client. Typically this is called when a
client sees a URL in a message and wants to render a preview for the user.
.. Note::
Clients should consider avoiding this endpoint for URLs posted in encrypted
rooms. Encrypted rooms often contain more sensitive information the users
do not want to share with the homeserver, and this can mean that the URLs
being shared should also not be shared with the homeserver.
operationId: getUrlPreview
produces: ["application/json"]
security:

1
changelogs/client_server/newsfragments/2343.clarification Normal file
View file

@ -0,0 +1 @@
Clarify that clients should consider not requesting URL previews in encrypted rooms.