mirror/iceshrimp
1
0
Fork 0
mirror of https://iceshrimp.dev/iceshrimp/iceshrimp synced 2024-11-23 14:46:07 +09:00
Code Issues Actions Packages Projects Releases Wiki Activity

[backend] Improve JSON-LD context size limiter

Browse Source
This commit is contained in:
Laura Hausmann 2024-07-28 17:00:00 +02:00
parent d9d6dc1b60
commit 9a8b7efcd6
No known key found for this signature in database
GPG Key ID: D044E84C5BE01605
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
packages/backend/src/remote/activitypub/misc/ld-signature.ts
View File

@ -122,11 +122,12 @@ export class LdSignature {
}
private async fetchDocument(url: string) {
const json = await fetch(url, {
const ctrl = new AbortController();
return await fetch(url, {
headers: {
Accept: "application/ld+json, application/json",
},
size: 1024 * 1024, // 1MiB
signal: ctrl.signal,
// TODO
//timeout: this.loderTimeout,
agent: (u) => (u.protocol === "http:" ? httpAgent : httpsAgent),
@ -134,11 +135,12 @@ export class LdSignature {
if (!res.ok) {
throw new Error(`${res.status} ${res.statusText}`);
} else {
return res.json();
if (res.size < 1024 * 1024) // 1MiB
return res.json();
ctrl.abort();
throw new Error('Size exceeded 1MiB');
}
});
return json;
}
public sha256(data: string): string {