Limit the number of events that can be requested when backfilling eve…

…nts (#6864) Limit the maximum number of events requested when backfilling events.
matrix-org · Feb 6, 2020 · 7765bf3 · 7765bf3
1 parent b0c8bdd
commit 7765bf3
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/changelog.d/6864.misc b/changelog.d/6864.misc
@@ -0,0 +1 @@
+Limit the number of events that can be requested by the backfill federation API to 100.
diff --git a/synapse/handlers/federation.py b/synapse/handlers/federation.py
@@ -1788,6 +1788,9 @@ def on_backfill_request(self, origin, room_id, pdu_list, limit):
         if not in_room:
             raise AuthError(403, "Host not in room.")
 
+        # Synapse asks for 100 events per backfill request. Do not allow more.
+        limit = min(limit, 100)
+
         events = yield self.store.get_backfill_events(room_id, pdu_list, limit)
 
         events = yield filter_events_for_server(self.storage, origin, events)
@@ -2168,6 +2171,7 @@ async def on_get_missing_events(
         if not in_room:
             raise AuthError(403, "Host not in room.")
 
+        # Only allow up to 20 events to be retrieved per request.
         limit = min(limit, 20)
 
         missing_events = await self.store.get_missing_events(
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		Limit the number of events that can be requested by the backfill federation API to 100.