egirlskey/packages
dakkar c05cc63e24 look inside url when checking activity origin - #512
The previous assertion that:

> if it's a complicated thing and the `activity.id` doesn't match, I
> think we're fine rejecting the activity

was wrong: at least peertube sends activities that have `url` as an
array of objects.

Notice that this does *not*, in fact, fix #512: the peertube activity
does not contain its short URL (`https://example.com/w/someid`), so
there's no way to confirm that it is the activity we requested.
2024-05-18 16:48:10 +01:00
..
backend look inside url when checking activity origin - #512 2024-05-18 16:48:10 +01:00
frontend merge: rework pagination - probably fixes #491 (!495) 2024-05-09 08:15:16 +00:00
megalodon fix conflicts 2024-04-07 15:42:28 +00:00
misskey-bubble-game merge upstream for 2024.2.1 2024-03-02 16:36:49 +00:00
misskey-js merge upstream for 2024.2.1 2024-03-02 16:36:49 +00:00
misskey-reversi merge upstream for 2024.2.1 2024-03-02 16:36:49 +00:00
shared chore: use @misskey-dev/eslint-plugin (#12860) 2023-12-31 15:26:57 +09:00
sw merge upstream for 2024.2.1 2024-03-02 16:36:49 +00:00
meta.json