kaslo/synapse
1
0
Fork 0
Code Packages Releases 124 Wiki Activity

Allow admins to bypass the quarantine check on media downloads (#19275)

Browse Source 
Co-authored-by: turt2live <1190097+turt2live@users.noreply.github.com>
Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
This commit is contained in:
Travis Ralston
2025-12-15 10:23:33 -07:00
committed by GitHub
parent 466994743a
commit 0f2b29511f
5 changed files with 197 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
docs/admin_api/media_admin_api.md
View File

@@ -115,6 +115,20 @@ is quarantined, Synapse will:
- Quarantine any existing cached remote media.
- Quarantine any future remote media.
## Downloading quarantined media
Normally, when media is quarantined, it will return a 404 error when downloaded.
Admins can bypass this by adding `?admin_unsafely_bypass_quarantine=true`
to the [normal download URL](https://spec.matrix.org/v1.16/client-server-api/#get_matrixclientv1mediadownloadservernamemediaid).
Bypassing the quarantine check is not recommended. Media is typically quarantined
to prevent harmful content from being served to users, which includes admins. Only
set the bypass parameter if you intentionally want to access potentially harmful
content.
Non-admin users cannot bypass quarantine checks, even when specifying the above
query parameter.
## Quarantining media by ID
This API quarantines a single piece of local or remote media.