matrix-org / matrix-appservice-irc

Node.js IRC bridge for Matrix
Apache License 2.0
460 stars 151 forks source link

Prevent low-risk SQL injection from roomId values when entered into the config #1619

Closed jaller94 closed 1 year ago

jaller94 commented 1 year ago

Prevents low-risk SQL injection from roomId values when checking room visibility.

This fixes a hard to exploit SQL injection vector. To abuse this, an attacker needs to be able to set malicious Matrix IDs in the room mappings.