Prevent setting push rules via account data endpoint

This commit is contained in:
Neil Alexander 2022-04-08 10:28:33 +01:00
parent 7499147550
commit addef743ca
No known key found for this signature in database
GPG key ID: A02A2019A2BB0944

View file

@ -95,10 +95,10 @@ func SaveAccountData(
}
}
if dataType == "m.fully_read" {
if dataType == "m.fully_read" || dataType == "m.push_rules" {
return util.JSONResponse{
Code: http.StatusForbidden,
JSON: jsonerror.Forbidden("Unable to set read marker"),
JSON: jsonerror.Forbidden(fmt.Sprintf("Unable to modify %q using this API", dataType)),
}
}