Change signature verification to ignore signatures with invalid host (#13033)
Instead of returning a signature verification error, pretend there was no signature (i.e., this does not allow access to resources that need a valid signature), so public resources can still be fetched Fix #13011
This commit is contained in:
parent
62f0b30617
commit
5265df0a8a
2 changed files with 29 additions and 0 deletions
|
@ -160,6 +160,8 @@ module SignatureVerification
|
|||
account ||= stoplight_wrap_request { ActivityPub::FetchRemoteKeyService.new.call(key_id, id: false) }
|
||||
account
|
||||
end
|
||||
rescue Mastodon::HostValidationError
|
||||
nil
|
||||
end
|
||||
|
||||
def stoplight_wrap_request(&block)
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue