deblan-mirror/mautrix-go
1
0
Fork 0
mirror of https://mau.dev/mautrix/go.git synced 2026-03-14 14:25:53 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

federation: don't allow redirects

Browse source
This commit is contained in:
Tulir Asokan 2025-10-18 13:29:16 +02:00
commit df957301be
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
federation/client.go
View file

@ -37,6 +37,10 @@ func NewClient(serverName string, key *SigningKey, cache ResolutionCache) *Clien
HTTP: &http.Client{
Transport: NewServerResolvingTransport(cache),
Timeout: 120 * time.Second,
CheckRedirect: func(req *http.Request, via []*http.Request) error {
// Federation requests do not allow redirects.
return http.ErrUseLastResponse
},
},
UserAgent: mautrix.DefaultUserAgent,
ServerName: serverName,
@ -310,7 +314,7 @@ func (c *Client) MakeFullRequest(ctx context.Context, params RequestParams) ([]b
_ = resp.Body.Close()
}()
var body []byte
if resp.StatusCode >= 400 {
if resp.StatusCode >= 300 {
body, err = mautrix.ParseErrorResponse(req, resp)
return body, resp, err
} else if params.ResponseJSON != nil || !params.DontReadBody {