egirlskey/packages/backend
dakkar c05cc63e24 look inside url when checking activity origin - #512
The previous assertion that:

> if it's a complicated thing and the `activity.id` doesn't match, I
> think we're fine rejecting the activity

was wrong: at least peertube sends activities that have `url` as an
array of objects.

Notice that this does *not*, in fact, fix #512: the peertube activity
does not contain its short URL (`https://example.com/w/someid`), so
there's no way to confirm that it is the activity we requested.
2024-05-18 16:48:10 +01:00
..
.vscode Update settings.json 2022-04-15 21:33:00 +09:00
assets upd: add misskey icon to font 2023-12-07 01:48:57 +01:00
migration fix repo + feedback URLs for Firefish / IceShrimp 2024-03-03 11:12:58 +00:00
src look inside url when checking activity origin - #512 2024-05-18 16:48:10 +01:00
test look inside url when checking activity origin - #512 2024-05-18 16:48:10 +01:00
test-server enhance(backend): テストの高速化 (#12939) 2024-01-08 17:43:52 +09:00
.eslintignore
.eslintrc.cjs test(server): add validation test of api:notes/create (#10090) 2023-02-26 11:28:05 +09:00
.madgerc Create .madgerc 2022-09-20 01:04:08 +09:00
.swcrc fix swcrc 2023-12-14 11:35:17 +09:00
check_connect.js (re) update SPDX-FileCopyrightText 2024-02-13 15:59:27 +00:00
generate_api_json.js fix: api-docが開けない問題を修正 (#13132) 2024-02-02 12:47:07 +09:00
jest.config.cjs enhance(backend): テストの高速化 (#12939) 2024-01-08 17:43:52 +09:00
jest.config.e2e.cjs enhance(backend): テストの高速化 (#12939) 2024-01-08 17:43:52 +09:00
jest.config.unit.cjs enhance(backend): テストの高速化 (#12939) 2024-01-08 17:43:52 +09:00
jsconfig.json
ormconfig.js longer statement_timeout for migrations - fixes 450 2024-03-09 15:38:36 +00:00
package.json merge: handle non-ASCII emoji names (!464) 2024-05-02 21:06:10 +00:00
README.md chore: ✌️ 2022-12-24 14:39:17 +09:00
tsconfig.json update deps (#11764) 2023-09-04 13:33:38 +09:00
watch.mjs (re) update SPDX-FileCopyrightText 2024-02-13 15:59:27 +00:00

Misskey Backend