techhub/mastodon
2
0
Fork 0
Code Activity

Merge pull request from GHSA-3fjr-858r-92rw

Browse Source 
* Fix insufficient origin validation

* Bump version to 4.3.0-alpha.1
This commit is contained in:
Claire
2024-02-01 15:56:46 +01:00
committed by GitHub
parent 9cdc60ecc6
commit 1726085db5
17 changed files with 37 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/services/activitypub/fetch_remote_account_service.rb
View File

@@ -2,7 +2,7 @@
class ActivityPub::FetchRemoteAccountService < ActivityPub::FetchRemoteActorService
# Does a WebFinger roundtrip on each call, unless `only_key` is true
def call(uri, id: true, prefetched_body: nil, break_on_redirect: false, only_key: false, suppress_errors: true, request_id: nil)
def call(uri, prefetched_body: nil, break_on_redirect: false, only_key: false, suppress_errors: true, request_id: nil)
actor = super
return actor if actor.nil? || actor.is_a?(Account)