(for instance, by usingCSP), a Matrix homeserver should not be hosted on a domain hosting other web applications. This especially applies to sharing the domain with Matrix web clients and other sensitive applications like webmail. Seehttps://developer.github.com/changes/2014-04-25-user-content...