Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 16:46:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: sanity-check the id when mocking a post

Browse Source
This commit is contained in:
Julian Lam
2025-02-08 20:28:17 -05:00
parent 040584f035
commit 5cbf3dd7ea
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/activitypub/mocks.js
View File

@@ -155,7 +155,10 @@ Mocks.post = async (objects) => {
await activitypub.actors.assert(Array.from(actorIds));
const posts = await Promise.all(objects.map(async (object) => {
if (!activitypub._constants.acceptedPostTypes.includes(object.type)) {
if (
!activitypub._constants.acceptedPostTypes.includes(object.type) ||
!activitypub.helpers.isUri(object.id) // sanity-check the id
) {
return null;
}