2026-02-20 05:40 UTC
@matrix @Frisk so as Erin mentions, the contributory check while perhaps not necessary - could be a good practice none the less. Is the current plan to include this in the (near) future?
Replies (1)
-
@Frisk@woof.tech 2026-02-20 08:56
@catatonicprime @matrix "That said, in our brief correspondence with the reporter, after outlining our position and asking for clarification or a sketch of an actual attack, we agreed to add the check as a defence-in-depth and to preempt future doubt about whether this is a vulnerability. " This is what Matrix security team already agreed to do in a blog post, it's just not seen as priority.