Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Remove trailing slash ability from password reset's submit_token endpoint #6074

Merged
merged 2 commits into from
Sep 20, 2019
Merged

Remove trailing slash ability from password reset's submit_token endpoint #6074

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ae40d82
Remove trailing slash ability from password_reset/submit_token
anoadragon453 Sep 20, 2019
bb0da4f
Add changelog
anoadragon453 Sep 20, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions changelog.d/6074.feature
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
Prevent password reset's submit_token endpoint from accepting trailing slashes.
2 changes: 1 addition & 1 deletion synapse/rest/client/v2_alpha/account.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -200,7 +200,7 @@ class PasswordResetSubmitTokenServlet(RestServlet):
"""Handles 3PID validation token submission"""

PATTERNS = client_patterns(
"/password_reset/(?P<medium>[^/]*)/submit_token/*$", releases=(), unstable=True
"/password_reset/(?P<medium>[^/]*)/submit_token$", releases=(), unstable=True
)

def __init__(self, hs):
Expand Down