Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 16:46:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: also ignore non-public notes on Update activity

Browse Source
This commit is contained in:
Julian Lam
2024-10-02 12:08:46 -04:00
parent f57758b9e5
commit 2713d13ca3
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/activitypub/inbox.js
View File

@@ -76,6 +76,11 @@ inbox.create = async (req) => {
inbox.update = async (req) => { inbox.update = async (req) => {
const { actor, object } = req.body; const { actor, object } = req.body;
// Temporary, reject non-public notes.
if (![...object.to, ...object.cc].includes(activitypub._constants.publicAddress)) {
throw new Error('[[error:activitypub.not-implemented]]');
}
// Origin checking // Origin checking
const actorHostname = new URL(actor).hostname; const actorHostname = new URL(actor).hostname;
const objectHostname = new URL(object.id).hostname; const objectHostname = new URL(object.id).hostname;