matrix-org / matrix-org/matrix-spec
Auto-showing images/content is a security risk, especially over federation (SPEC-256)
- Dominant language
- HTML
- Stars
- 330
- Forks
- 150
- Avg merge
- 2h 21m
- Merged PRs (30d)
- 3
Description
Submitted by @matthew:matrix.org
Clients which auto-show thumbnails (i.e. all graphical ones) currently force the local HS to cache the remote content. Thus malicious content can be easily pushed (rather than pulled) over federation. We should either send blurred thumbnails or something or just provide option on graphical clients to only load (and thus mirror) on demand. Or possibly sidestep mirroring entirely.
(Imported from https://matrix.org/jira/browse/SPEC-256)
Contributor guide
Research direction
Start by reviewing the federation behavior described in the issue and the imported SPEC-256 context. The issue does not name files, tests, or a settled approach; work is not ready until the thumbnail-loading policy and acceptance criteria are decided.
Written by the indexing model from the issue text.
Assessment
- Domain
- distributed-systems, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100