Skip to content
  • kaniini's avatar
    security: detect object containment violations at the IR level · 739bbe0d
    kaniini authored
    It is more efficient to check for object containment violations at the IR
    level instead of in the protocol handlers.  OStatus containment is especially
    a tricky situation, as the containment rules don't match those of IR and
    ActivityPub.
    
    Accordingly, we just always do a final containment check at the IR level
    before the object is added to the IR object graph.
    739bbe0d