mirror/iceshrimp
1
0
Fork 0
mirror of https://iceshrimp.dev/iceshrimp/iceshrimp synced 2024-11-27 14:28:08 +09:00
Code Issues Actions Packages Projects Releases Wiki Activity

[backend] Reject anonymous objects in the AP resolver

Browse Source
This commit is contained in:
Laura Hausmann 2024-03-27 13:02:04 +01:00
parent ac57c58ecf
commit cf506d3bd9
No known key found for this signature in database
GPG Key ID: D044E84C5BE01605
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/backend/src/remote/activitypub/resolver.ts
View File

@ -124,7 +124,7 @@ export default class Resolver {
const {res, object} = await this.doFetch(value);
if (object.id == null) return object;
if (object.id == null) throw new Error("Object has no ID");
if (res.finalUrl === object.id) return object;
if (new URL(res.finalUrl).host !== new URL(object.id).host)