element-hq / element-hq/synapse
Disable media federation
- Dominant language
- Python
- Stars
- 4.6k
- Forks
- 607
- Avg merge
- 5d 22h
- Merged PRs (30d)
- 51
Description
This issue has been migrated from [#15579](https://github.com/matrix-org/synapse/issues/15579).
---
**Description:**
When a remote media MXC is requested, provided this feature is enabled, redirect to the same resource on the homeserver it is hosted on. Do not mirror content.
I need this feature added to resolve the fact that malicious individuals are federating illegal content onto my private matrix homeserver and reporting it to my VPS.
An alternative would be to require an access token be passed when attempting to download remote media.
Contributor guide
Research direction
No files, tests, or entry points are named. Start by locating the remote media MXC request and federation handling, then determine how a redirect to the hosting homeserver or an access-token requirement would fit the existing behavior; done means remote media is not mirrored when the feature is enabled and the chosen access control works safely.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- backend, networking
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 28/100