Room membership endpoints (/join
, /leave
, /forget
) accept requests with malformed or no bodies
#13388
Labels
/join
, /leave
, /forget
) accept requests with malformed or no bodies
#13388
This issue has been migrated from #13388.
The following endpoints accept, and ignore, requests with bodies which are not valid JSON objects:
/_matrix/client/v3/join/{roomIdOrAlias}
/_matrix/client/v3/rooms/{roomId}/join
/_matrix/client/v3/rooms/{roomId}/leave
(as well as their non-
v3
equivalents).This is a spec violation, but it appears there are a number of clients that currently rely on it.
The text was updated successfully, but these errors were encountered: