Skip to content

Don't onboard rooms which were created remotely anymore #37

@mweinelt

Description

@mweinelt

Due to https://matrix.org/blog/2025/07/security-predisclosure/ we should not onboard rooms anymore, which were created on another homeserver, by someone not on the moderation team.

The reason is that the creating account will have infinite permissions and can therefore work around the moderation bot.

Please update https://github.com/NixOS/moderation/blob/main/matrix/adding-rooms.md accordingly, if you agree.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions