element-hq / hydrogen-web

Lightweight matrix client with legacy and mobile browser support
Apache License 2.0
646 stars 126 forks source link

Only send token after verifying the homeserver #1189

Closed MidhunSureshR closed 1 month ago

MidhunSureshR commented 1 month ago

Similar to https://github.com/element-hq/element-web/security/advisories/GHSA-3jm3-x98c-r34x but for Hydrogen. Not High severity since we lack widget support.