element-hq / element-hq/element-web
Messages with duplicate message indices/replay attacks allow you to request keys
Open
A-Appearance
A-E2EE
A-Timeline
O-Uncommon
S-Minor
T-Enhancement
- Dominant language
- TypeScript
- Stars
- 13.5k
- Forks
- 2.8k
- PR merge metrics
- PR metrics pending
Description
### Steps to reproduce
1. Create a message with a duplicate message index
### What happened?
Element shows you the option to request keys for that message:
### What did you expect?
It should just tell me about the error. It already has the decryption key, requesting it again is confusing and makes no sense.
### Operating system
Linux
### Browser information
Firefox 90
### URL for webapp
riot.neko.dev, 1.34
Contributor guide
Assessment
This issue has not been assessed yet.