element-hq / element-hq/element-x-ios

I posted a message in my Space

Open
#3,681 3 comments 0 reactions 0 assignees View on GitHub
A-Room O-Occasional S-Minor T-Defect
Dominant language
Swift
Stars
945
Forks
372
Avg merge
21h 42m
Merged PRs (30d)
67

Description

### Steps to reproduce

I was not sure if this is a bug, or security vulnerability (since the server allowed it), or both.

With Element X iOS I have posted a message in my Space. The server is matrix.org
The steps I did:
1. In my public room #lrl I have edited room info and in there I added a link to my Space for people who have been invited directly to the room, so they would have an easy way to join the entire Space as well. The link leads to #LinuxRenaissance which is a space.
2. With Element X I have clicked once on the above link and nothing happened. I clicked again and it took me to my Space which appeared as a regular room.
3. I typed two messages in there and my Space members told me they got a notification that I am writing in the Space, and that they are unable to see my message as it is ... well, it's in a "subspace" :)

I am opening this issue on request of mr. Stefan. I have left everyone as is (I did not delete messages in my Space) so someone can come and take a look.

![Image](https://github.com/user-attachments/assets/4ff71931-3830-4d46-9677-673f82e430ad)
![Image](https://github.com/user-attachments/assets/bc104d59-30ca-4e22-837e-b349a55b2989)
![Image](https://github.com/user-attachments/assets/175b30fa-0c60-47e7-bfa3-52b9e97da51b)

### Outcome

I have expected that the client will not be able to send a message into a Space.
I have expected that the server would reject an attempt to send a message to a space.

Instead, both of the above came to pass.

### Your phone model

iPhone 15 Pro Max

### Operating system version

18.2.1

### Application version

1.9.10 (141)

### Homeserver

matrix.org

### Will you send logs?

Yes

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.