mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-10-26 16:46:12 +01:00
fix: tighten up logic in checkToPid internal method
This commit is contained in:
@@ -8,6 +8,7 @@ const topics = require('../topics');
|
|||||||
const categories = require('../categories');
|
const categories = require('../categories');
|
||||||
const groups = require('../groups');
|
const groups = require('../groups');
|
||||||
const privileges = require('../privileges');
|
const privileges = require('../privileges');
|
||||||
|
const activitypub = require('../activitypub');
|
||||||
const utils = require('../utils');
|
const utils = require('../utils');
|
||||||
|
|
||||||
module.exports = function (Posts) {
|
module.exports = function (Posts) {
|
||||||
@@ -82,8 +83,8 @@ module.exports = function (Posts) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
async function checkToPid(toPid, uid) {
|
async function checkToPid(toPid, uid) {
|
||||||
if (!utils.isNumber(toPid)) {
|
if (!utils.isNumber(toPid) && !activitypub.helpers.isUri(toPid)) {
|
||||||
return;
|
throw new Error('[[error:invalid-pid]]');
|
||||||
}
|
}
|
||||||
|
|
||||||
const [toPost, canViewToPid] = await Promise.all([
|
const [toPost, canViewToPid] = await Promise.all([
|
||||||
|
|||||||
Reference in New Issue
Block a user