diff options
| author | dakkar <dakkar@thenautilus.net> | 2023-12-21 18:17:19 +0000 |
|---|---|---|
| committer | dakkar <dakkar@thenautilus.net> | 2023-12-23 15:26:42 +0000 |
| commit | 1984416e3efeb987c94cfefb44d800bc0521e415 (patch) | |
| tree | 04b2686a777ac01ed8e722bd618adec0ed211823 /packages/backend | |
| parent | authorized fetch #217 (diff) | |
| download | sharkey-1984416e3efeb987c94cfefb44d800bc0521e415.tar.gz sharkey-1984416e3efeb987c94cfefb44d800bc0521e415.tar.bz2 sharkey-1984416e3efeb987c94cfefb44d800bc0521e415.zip | |
authorized fetch: let /@instance.actor through
this is probably never actually used, but it still looks like a good
idea (also, FireFish does it)
thanks @ShittyKoper for noticing!
Diffstat (limited to 'packages/backend')
| -rw-r--r-- | packages/backend/src/server/ActivityPubServerService.ts | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/packages/backend/src/server/ActivityPubServerService.ts b/packages/backend/src/server/ActivityPubServerService.ts index a0ad4a134f..967a69cb77 100644 --- a/packages/backend/src/server/ActivityPubServerService.ts +++ b/packages/backend/src/server/ActivityPubServerService.ts @@ -131,6 +131,7 @@ export class ActivityPubServerService { const instanceActor = await this.instanceActorService.getInstanceActor(); if (userId === instanceActor.id) return false; + if (userId === instanceActor.username) return false; } let signature; |