Disable media federation #15579

Activity

1. dklimpel commented on May 12, 2023

   

   dklimpel

   on May 12, 2023

   Contributor

   More actions

   Are you looking for this?

   • Add config option to prevent media downloads from listed domains. #15197
2. catfromplan9 commented on May 12, 2023

   

   catfromplan9

   on May 12, 2023

   Author

   More actions

   Are you looking for this?

   * [Add config option to prevent media downloads from listed domains. #15197](https://github.com/matrix-org/synapse/pull/15197)
   

   Yes, thanks
3. MatMaul

   added

   A-Media-RepositoryUploading, downloading images and video, thumbnailingUploading, downloading images and video, thumbnailing

   A-ModerationTools for moderating HSes: event redaction, media removal, purge admin API, reports from users, ...Tools for moderating HSes: event redaction, media removal, purge admin API, reports from users, ...

   S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

   T-EnhancementNew features, changes in functionality, improvements in performance, or user-facing enhancements.New features, changes in functionality, improvements in performance, or user-facing enhancements.

   Z-Spec-BlockedThis change is blocked on specification (e.g. an MSC).This change is blocked on specification (e.g. an MSC).

   on May 12, 2023
4. catfromplan9 commented on May 16, 2023

   

   catfromplan9

   on May 16, 2023

   Author

   More actions

   Description:

   When a remote media MXC is requested, provided this feature is enabled, redirect to the same resource on the homeserver it is hosted on. Do not mirror content.

   I need this feature added to resolve the fact that malicious individuals are federating illegal content onto my private matrix homeserver and reporting it to my VPS.

   An alternative would be to require an access token be passed when attempting to download remote media.

   For now, I have implemented this by writing my own python webserver and adding nginx config option for proxying to it when applicable. It works fine on all the clients and I think merging the functionality into synapse as a toggleable feature would be great