mirrors/owncast
1
0
Fork 0
mirror of https://github.com/owncast/owncast.git synced 2024-11-24 05:38:58 +03:00
Code Issues Projects Releases Packages Wiki Activity

Add a sanity check to make sure the actor IRI exists

Browse source
This commit is contained in:
Gabe Kangas 2022-01-30 13:14:56 -08:00
parent 4e76fff0d0
commit 65f0673dba
No known key found for this signature in database
GPG key ID: 9A56337728BC81EA
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
activitypub/inbox/worker.go
View file

@ -71,6 +71,10 @@ func Verify(request *http.Request) (bool, error) {
return false, errors.Wrap(err, "failed to resolve actor from IRI to fetch key")
}
if actor.ActorIri == nil {
return false, errors.New("actor IRI is empty")
}
// Test to see if the actor is in the list of blocked federated domains.
if isBlockedDomain(actor.ActorIri.Hostname()) {
return false, errors.New("domain is blocked")