From 5740cb3e5838761452bc5de0e92170b72a62ae90 Mon Sep 17 00:00:00 2001
From: Mark Haines <mjark@negativecurvature.net>
Date: Mon, 11 Sep 2017 15:47:50 +0100
Subject: [PATCH] Redact the event before verifying its signature

... in the federation invite API.
---
 .../matrix-org/dendrite/federationapi/writers/invite.go         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/github.com/matrix-org/dendrite/federationapi/writers/invite.go b/src/github.com/matrix-org/dendrite/federationapi/writers/invite.go
index 20048103..f3f1191c 100644
--- a/src/github.com/matrix-org/dendrite/federationapi/writers/invite.go
+++ b/src/github.com/matrix-org/dendrite/federationapi/writers/invite.go
@@ -73,7 +73,7 @@ func Invite(
 	// Check that the event is signed by the server sending the request.
 	verifyRequests := []gomatrixserverlib.VerifyJSONRequest{{
 		ServerName: event.Origin(),
-		Message:    event.JSON(),
+		Message:    event.Redact().JSON(),
 		AtTS:       event.OriginServerTS(),
 	}}
 	verifyResults, err := keys.VerifyJSONs(verifyRequests)
-- 
GitLab