sup39
b71da18b03
refactor (backend): port fetch-meta to backend-rs
...
Co-authored-by: naskya <m@naskya.net>
2024-04-14 20:16:22 +09:00
naskya
148c3736ce
refactor (backend): port convert-host to backend-rs
...
Co-authored-by: sup39 <dev@sup39.dev>
2024-04-12 17:13:57 +09:00
Laura Hausmann
e753b313da
fix (backend): reject anonymous objects
2024-03-30 19:01:28 +09:00
Laura Hausmann
2e51a33ae5
fix (backend): stricter hostname checking when fetching remote objects
...
Co-authored-by: naskya <m@naskya.net>
2024-03-30 19:01:28 +09:00
Laura Hausmann
ada0137a35
fix (backend): verify object id host matches final URL when fetching remote activities
...
5f6096c1b7
Co-authored-by: naskya <m@naskya.net>
2024-03-30 19:01:28 +09:00
naskya
00b15bb17c
refactor (backend): mark resolveLocal as async
...
There are many type errors that need to be fixed :(
2024-03-30 19:01:16 +09:00
Nyan Helsing
a98a26e901
chore: format
...
Co-authored-by: deathg.rip <josh@deathg.rip>
2024-03-28 05:25:33 +00:00
老周部落
76738f6968
fix(backend): backport fix about resolver cannot parse some follows and notes request
2024-02-27 01:38:02 +08:00
mei23
e38ee08ef9
fix (backend): validate ActivityPub Content-Type
...
Co-authored-by: naskya <m@naskya.net>
2024-02-17 18:42:38 +09:00
ThatOneCalculator
623cadf981
Revert "chore: lint import order"
...
This reverts commit 8d3c35c0c6
.
2023-12-04 23:12:10 -08:00
ThatOneCalculator
8d3c35c0c6
chore: lint import order
2023-11-26 12:33:46 -08:00
naskya
adee17b85a
chore: organize backend imports
...
* remove unused/duplicate imports
* replace paths like "../../../define.js" to be more readable
* add missing @types packages
2023-10-30 18:06:08 +09:00
Laura Hausmann
b20298ceb1
Fix AP resolver history on reuse for authorized fetch
2023-06-28 02:30:00 +02:00
Laura Hausmann
d9fc2c061d
Add signature to remote note lookup
2023-06-28 01:05:25 +02:00
ThatOneCalculator
6b00abf05c
refactor: 🎨 rome
2023-01-12 20:40:33 -08:00
Johann150
d7390e09ff
activitypub: block check for resolving collections
2022-12-25 15:10:44 -05:00
Francis Dinh
d2066d0d86
add checks to resolver and performOneActivity
2022-12-25 15:10:33 -05:00
Francis Dinh
d9b7219404
Block subdomains of blocked hosts
2022-12-24 14:46:09 -05:00
skeh
3ff6433fab
Merge pull request 'hotfix/misskey-forkbomb' ( #8 ) from hotfix/misskey-forkbomb into stage
...
Reviewed-on: https://code.vtopia.live/Vtopia/MissV/pulls/8
2022-12-01 00:30:55 -08:00
ThatOneCalculator
b383c904b2
change to click.self
2022-10-28 10:52:13 -07:00
nullobsi
a03f13fb3f
Add Secure Mode and Private Mode
...
- Add instance actor
- Add private mode, which uses an allowlist
- Add Secure Mode, restricts access to blocked instances
2022-09-06 20:46:41 -07:00
Johann150
9954c054a7
fix: ensure resolver does not fetch local resources via HTTP(S) ( #8733 )
...
* refactor: parseUri types and checks
The type has been refined to better represent what it actually is. Uses of
parseUri are now also checking the parsed object type before resolving.
* cannot resolve URLs with fragments
* also take remaining part of URL into account
Needed for parsing the follows URIs.
* Resolver uses DbResolver for local
* remove unnecessary use of DbResolver
Using DbResolver would mean that the URL is parsed and handled again.
This duplicated processing can be avoided by querying the database directly.
* fix missing property name
2022-06-04 11:29:20 +09:00
syuilo
2d2b3edaaf
refactor: fix type
2022-04-17 13:26:31 +09:00
syuilo
d071d18dd7
refactor: Use ESM ( #8358 )
...
* wip
* wip
* fix
* clean up
* Update tsconfig.json
* Update activitypub.ts
* wip
2022-02-27 11:07:39 +09:00
syuilo
0e4a111f81
refactoring
...
Resolve #7779
2021-11-12 02:02:25 +09:00