1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/element_ynh.git synced 2024-09-03 18:36:08 +02:00

Update DISCLAIMER.md

This commit is contained in:
Éric Gaspar 2023-01-24 10:06:47 +01:00
parent 9b573d4ca9
commit 758f43e593

View file

@ -9,7 +9,7 @@ This application support the SSO. If you want to use the SSO, you need to define
### Important Security Note
We do not recommend running Element from the same domain name as your Matrix
homeserver (Synapse). The reason is the risk of XSS (cross-site-scripting)
homeserver (Synapse). The reason is the risk of XSS (cross-site-scripting)
vulnerabilities that could occur if someone caused Element to load and render
malicious user generated content from a Matrix API which then had trusted
access to Element (or other apps) due to sharing the same domain.