check that fetched objects id/url match the url used to fetch them
this makes it harder for a malicious actor to pretend to be someone else
Showing
- packages/backend/src/core/HttpRequestService.ts 7 additions, 1 deletionpackages/backend/src/core/HttpRequestService.ts
- packages/backend/src/core/activitypub/ApRequestService.ts 8 additions, 1 deletionpackages/backend/src/core/activitypub/ApRequestService.ts
- packages/backend/src/core/activitypub/misc/check-against-url.ts 19 additions, 0 deletions...es/backend/src/core/activitypub/misc/check-against-url.ts
Loading
Please register or sign in to comment