Change quote verification to not bypass authorization flow for mentions (#35528)

2025-07-25 18:50:38 +02:00
parent 77d2cdb302
commit 6ff4e83937
5 changed files with 6 additions and 16 deletions
--- a/app/lib/activitypub/parser/status_parser.rb
+++ b/app/lib/activitypub/parser/status_parser.rb
@@ -152,9 +152,6 @@ class ActivityPub::Parser::StatusParser
    # Remove the special-meaning actor URI
    allowed_actors.delete(@options[:actor_uri])

-    # Tagged users are always allowed, so remove them
-    allowed_actors -= as_array(@object['tag']).filter_map { |tag| tag['href'] if equals_or_includes?(tag['type'], 'Mention') }
-
    # Any unrecognized actor is marked as unknown
    flags |= Status::QUOTE_APPROVAL_POLICY_FLAGS[:unknown] unless allowed_actors.empty?