Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 16:46:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: reject spiders on remote profile GETs

Browse Source
This commit is contained in:
Julian Lam
2024-01-26 11:28:19 -05:00
parent 25434d2a6e
commit a355c05d83
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/controllers/activitypub/profiles.js
View File

@@ -7,6 +7,10 @@ const pagination = require('../../pagination');
const controller = module.exports; const controller = module.exports;
controller.get = async function (req, res, next) { controller.get = async function (req, res, next) {
if (req.uid === -1) {
return helpers.notAllowed(req, res);
}
const { userslug: uid } = req.params; const { userslug: uid } = req.params;
const actor = await getActor(req.uid, uid); const actor = await getActor(req.uid, uid);
if (!actor) { if (!actor) {
@@ -18,6 +22,10 @@ controller.get = async function (req, res, next) {
}; };
controller.getFollow = async function (tpl, name, req, res) { controller.getFollow = async function (tpl, name, req, res) {
if (req.uid === -1) {
return helpers.notAllowed(req, res);
}
const actor = await getActor(req.uid, req.params.userslug); const actor = await getActor(req.uid, req.params.userslug);
const { userslug } = req.params; const { userslug } = req.params;