search

matrix-org / matrix-spec-proposals

Proposals for changes to the matrix specification
Apache License 2.0
982 stars 374 forks source link

MSC4149: Update CSP Directives for Media Repository #4149

Open tcpipuk opened 3 months ago

tcpipuk commented 3 months ago

Rendered

Signed-off-by: Tom Foster tom@tcpip.uk

tcpipuk commented 1 week ago

Is this MSC considered redundant now MSC3916 has been merged, or should we consider progressing as servers still support the deprecated unauthenticated media endpoints?

turt2live commented 1 week ago

The authenticated endpoints could still end up needing a CSP depending on how they're used - updating it doesn't seem like a bad idea.

turt2live commented 1 week ago

(please also avoid force-pushing after review has been given. It makes it harder to see what's changed, and we squash commits anyways)