matrix-media-repo

matrix-media-repo copied to clipboard

Support go 1.17

2

at the moment matrix-media-repo errors on go 1.17 with: ``` panic: qtls.ClientHelloInfo doesn't match goroutine 1 [running]: github.com/marten-seemann/qtls-go1-15.init.0() /opt/matrix/matrix-media-repo/go/pkg/mod/github.com/marten-seemann/[email protected]/unsafe.go:20 +0x132 ``` this should be fixed in a quic-go version above...

L0ric0

Currently it's possible to configure the matrix-media-repo URL previewer to blacklist ranges of IP addresses, but many hosts do not have a static IP. Synapse allows regex blacklisting of both...

jellykells

Bumps [github.com/ipfs/go-ipfs](https://github.com/ipfs/go-ipfs) from 0.8.0 to 0.13.1. Release notes Sourced from github.com/ipfs/go-ipfs's releases. v0.13.1 go-ipfs v0.13.1 Release This release includes security fixes for various DOS vectors when importing untrusted user input...

dependabot[bot]

https://github.com/matrix-org/matrix-spec-proposals/pull/3828

turt2live

Possible tcp memory leak, eventually leading to CPU spin

9

On my server it's become increasingly more common that the media repo will get "stuck" and start thrashing the CPU. It otherwise seems to continue to log though I can't...

Half-Shot

Prevent repeated requests to the same media file by the same requester

3

While in theory I suppose a sensible cache would help with this, *in practise* the media repo doesn't cope very well with repeatedly requesting the same media file, and it...

Half-Shot

eg a config block like: ```yaml vhosts: "matrix.example.org": "example.org" ``` so when the media repo is approached with `Host: matrix.example.org` it re-maps it to `example.org`.

turt2live

At least optionally, so we can see what is hitting us when we get hit by spam.

Half-Shot

the response is logged before it is changed, unhelpfully.

turt2live

TODO: Description.

turt2live