From 3bf398e79784c129c15eaeb041f1bdd217d62098 Mon Sep 17 00:00:00 2001 From: Julian Lam Date: Thu, 16 Apr 2026 14:58:15 -0400 Subject: [PATCH] Revert "feat: add domain blocklist check in activitypub middleware" This was already done later in the file. This reverts commit 8e5e208607a625a751f151613ae040f71d94c0a4. --- src/middleware/activitypub.js | 8 -------- 1 file changed, 8 deletions(-) diff --git a/src/middleware/activitypub.js b/src/middleware/activitypub.js index 86d316d7d7..0a8a89324d 100644 --- a/src/middleware/activitypub.js +++ b/src/middleware/activitypub.js @@ -76,14 +76,6 @@ middleware.assertPayload = helpers.try(async function (req, res, next) { return res.sendStatus(403); } - // Domain check against blocklists - const { hostname } = new URL(req.body.actor); - const isAllowed = await activitypub.blocklists.check(hostname); - if (!isAllowed) { - activitypub.helpers.log(`[middleware/activitypub] Blocked incoming activity from ${hostname} due to blocklist.`); - return res.sendStatus(403); - } - // Sanity-check payload schema const required = ['id', 'type', 'actor', 'object']; if (!required.every(prop => req.body.hasOwnProperty(prop))) {