Don't onboard rooms which were created remotely anymore
Open
@dcarosone is already working on this.
Since Jul 20, 2025.
- Dominant language
- No language data
- Stars
- 24
- Forks
- 8
- PR merge metrics
- No merged PRs in 30d
Description
Due to https://matrix.org/blog/2025/07/security-predisclosure/ we should not onboard rooms anymore, which were created on another homeserver, by someone not on the moderation team.
The reason is that the creating account will have infinite permissions and can therefore work around the moderation bot.
Please update https://github.com/NixOS/moderation/blob/main/matrix/adding-rooms.md accordingly, if you agree.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.