Sharkey/packages/backend
dakkar c05cc63e24 look inside url when checking activity origin - #512
The previous assertion that:

> if it's a complicated thing and the `activity.id` doesn't match, I
> think we're fine rejecting the activity

was wrong: at least peertube sends activities that have `url` as an
array of objects.

Notice that this does *not*, in fact, fix #512: the peertube activity
does not contain its short URL (`https://example.com/w/someid`), so
there's no way to confirm that it is the activity we requested.
2024-05-18 16:48:10 +01:00
..
.vscode
assets
migration fix repo + feedback URLs for Firefish / IceShrimp 2024-03-03 11:12:58 +00:00
src look inside url when checking activity origin - #512 2024-05-18 16:48:10 +01:00
test look inside url when checking activity origin - #512 2024-05-18 16:48:10 +01:00
test-server
.eslintignore
.eslintrc.cjs
.madgerc
.swcrc
check_connect.js (re) update SPDX-FileCopyrightText 2024-02-13 15:59:27 +00:00
generate_api_json.js fix: api-docが開けない問題を修正 (#13132) 2024-02-02 12:47:07 +09:00
jest.config.cjs
jest.config.e2e.cjs
jest.config.unit.cjs
jsconfig.json
ormconfig.js longer statement_timeout for migrations - fixes 450 2024-03-09 15:38:36 +00:00
package.json merge: handle non-ASCII emoji names (!464) 2024-05-02 21:06:10 +00:00
README.md
tsconfig.json
watch.mjs (re) update SPDX-FileCopyrightText 2024-02-13 15:59:27 +00:00

Misskey Backend