feat: Ignore ACLs that deny everyone

This commit is contained in:
timedout 2026-01-15 12:30:05 +00:00
parent e6c7a4ae60
commit 40ac1a49d0
No known key found for this signature in database
GPG key ID: 0FA334385D0B689F

View file

@ -36,6 +36,12 @@ pub async fn acl_check(&self, server_name: &ServerName, room_id: &RoomId) -> Res
trace!("server {server_name} is allowed by ACL");
Ok(())
} else {
if acl_event_content.deny.contains(&String::from("*"))
&& server_name == self.services.globals.server_name()
{
warn!(%room_id, "Ignoring broken ACL event that denies everyone");
return Ok(());
}
debug!("Server {server_name} was denied by room ACL in {room_id}");
Err!(Request(Forbidden("Server was denied by room ACL")))
}