Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 16:46:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: #12707 ensure actor matches context attributedTo

Browse Source
This commit is contained in:
Julian Lam
2024-10-24 14:43:50 -04:00
parent 3023b25172
commit 998273cdc4
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/activitypub/inbox.js
View File

@@ -77,7 +77,7 @@ inbox.create = async (req) => {
}; };
inbox.add = async (req) => { inbox.add = async (req) => {
const { object, target } = req.body; const { actor, object, target } = req.body;
// Only react on Adds pertaining to local posts // Only react on Adds pertaining to local posts
const { type, id: pid } = await activitypub.helpers.resolveLocalId(object); const { type, id: pid } = await activitypub.helpers.resolveLocalId(object);
@@ -85,11 +85,15 @@ inbox.add = async (req) => {
// Check context of OP // Check context of OP
const tid = await posts.getPostField(pid, 'tid'); const tid = await posts.getPostField(pid, 'tid');
const context = await topics.getTopicField(tid, 'context'); const context = await topics.getTopicField(tid, 'context');
if (context && context === target) { console.log(context);
if (context) {
const { attributedTo } = await activitypub.get('uid', 0, context);
if (context === target && attributedTo === actor) {
activitypub.helpers.log(`[activitypub/inbox/add] Associating pid ${pid} with new context ${target}`); activitypub.helpers.log(`[activitypub/inbox/add] Associating pid ${pid} with new context ${target}`);
await posts.setPostField(pid, 'context', target); await posts.setPostField(pid, 'context', target);
} }
} }
}
}; };
inbox.update = async (req) => { inbox.update = async (req) => {