Navy.gif/owncast
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add a sanity check to make sure the actor IRI exists

Browse Source
This commit is contained in:
Gabe Kangas 2022-01-30 13:14:56 -08:00
parent 4e76fff0d0
commit 65f0673dba
No known key found for this signature in database
GPG Key ID: 9A56337728BC81EA
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
activitypub/inbox/worker.go
View File

@ -71,6 +71,10 @@ func Verify(request *http.Request) (bool, error) {
return false, errors.Wrap(err, "failed to resolve actor from IRI to fetch key")
}
if actor.ActorIri == nil {
return false, errors.New("actor IRI is empty")
}
// Test to see if the actor is in the list of blocked federated domains.
if isBlockedDomain(actor.ActorIri.Hostname()) {
return false, errors.New("domain is blocked")