Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
Pleroma
pleroma
Commits
603fccf1
Commit
603fccf1
authored
Nov 17, 2018
by
kaniini
Browse files
activitypub: fetch_object_from_id(): prefer `actor` over `attributedTo` to avoid spoofing
parent
9c8adfb6
Pipeline
#4532
passed with stages
in 7 minutes and 20 seconds
Changes
1
Pipelines
1
Hide whitespace changes
Inline
Side-by-side
lib/pleroma/web/activity_pub/activity_pub.ex
View file @
603fccf1
...
...
@@ -747,7 +747,7 @@ def fetch_object_from_id(id) do
"type"
=>
"Create"
,
"to"
=>
data
[
"to"
],
"cc"
=>
data
[
"cc"
],
"actor"
=>
data
[
"attributedTo"
],
"actor"
=>
data
[
"actor"
]
||
data
[
"attributedTo"
],
"object"
=>
data
},
:ok
<-
Transmogrifier
.
contain_origin
(
id
,
params
),
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment