From 1984416e3efeb987c94cfefb44d800bc0521e415 Mon Sep 17 00:00:00 2001 From: dakkar Date: Thu, 21 Dec 2023 18:17:19 +0000 Subject: [PATCH] authorized fetch: let /@instance.actor through this is probably never actually used, but it still looks like a good idea (also, FireFish does it) thanks @ShittyKoper for noticing! --- packages/backend/src/server/ActivityPubServerService.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/packages/backend/src/server/ActivityPubServerService.ts b/packages/backend/src/server/ActivityPubServerService.ts index a0ad4a134..967a69cb7 100644 --- a/packages/backend/src/server/ActivityPubServerService.ts +++ b/packages/backend/src/server/ActivityPubServerService.ts @@ -131,6 +131,7 @@ export class ActivityPubServerService { const instanceActor = await this.instanceActorService.getInstanceActor(); if (userId === instanceActor.id) return false; + if (userId === instanceActor.username) return false; } let signature;