mirror/mastodon
1
0
Fork 0
mirror of https://github.com/mastodon/mastodon synced 2024-11-28 06:48:28 +09:00
Code

Ensure request.body isn't emptied out before signature verification (#10432)

Browse Source 
Fixes #10429
This commit is contained in:
ThibG 2019-03-31 17:27:24 +02:00 committed by Eugen Rochko
parent 59cce07601
commit 68c797bece
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/controllers/activitypub/inboxes_controller.rb
View File

@ -32,7 +32,10 @@ class ActivityPub::InboxesController < Api::BaseController
end
def body
@body ||= request.body.read.force_encoding('UTF-8')
return @body if defined?(@body)
@body = request.body.read.force_encoding('UTF-8')
request.body.rewind if request.body.respond_to?(:rewind)
@body
end
def upgrade_account