Commit Graph

25 Commits

Author SHA1 Message Date
sup39 b71da18b03
refactor (backend): port fetch-meta to backend-rs
Co-authored-by: naskya <m@naskya.net>
2024-04-14 20:16:22 +09:00
naskya 148c3736ce
refactor (backend): port convert-host to backend-rs
Co-authored-by: sup39 <dev@sup39.dev>
2024-04-12 17:13:57 +09:00
Laura Hausmann e753b313da
fix (backend): reject anonymous objects 2024-03-30 19:01:28 +09:00
Laura Hausmann 2e51a33ae5
fix (backend): stricter hostname checking when fetching remote objects
Co-authored-by: naskya <m@naskya.net>
2024-03-30 19:01:28 +09:00
Laura Hausmann ada0137a35
fix (backend): verify object id host matches final URL when fetching remote activities
5f6096c1b7

Co-authored-by: naskya <m@naskya.net>
2024-03-30 19:01:28 +09:00
naskya 00b15bb17c
refactor (backend): mark resolveLocal as async
There are many type errors that need to be fixed :(
2024-03-30 19:01:16 +09:00
Nyan Helsing a98a26e901 chore: format
Co-authored-by: deathg.rip <josh@deathg.rip>
2024-03-28 05:25:33 +00:00
老周部落 76738f6968
fix(backend): backport fix about resolver cannot parse some follows and notes request 2024-02-27 01:38:02 +08:00
mei23 e38ee08ef9
fix (backend): validate ActivityPub Content-Type
Co-authored-by: naskya <m@naskya.net>
2024-02-17 18:42:38 +09:00
ThatOneCalculator 623cadf981
Revert "chore: lint import order"
This reverts commit 8d3c35c0c6.
2023-12-04 23:12:10 -08:00
ThatOneCalculator 8d3c35c0c6
chore: lint import order 2023-11-26 12:33:46 -08:00
naskya adee17b85a
chore: organize backend imports
* remove unused/duplicate imports
* replace paths like "../../../define.js" to be more readable
* add missing @types packages
2023-10-30 18:06:08 +09:00
Laura Hausmann b20298ceb1
Fix AP resolver history on reuse for authorized fetch 2023-06-28 02:30:00 +02:00
Laura Hausmann d9fc2c061d
Add signature to remote note lookup 2023-06-28 01:05:25 +02:00
ThatOneCalculator 6b00abf05c
refactor: 🎨 rome 2023-01-12 20:40:33 -08:00
Johann150 d7390e09ff
activitypub: block check for resolving collections 2022-12-25 15:10:44 -05:00
Francis Dinh d2066d0d86
add checks to resolver and performOneActivity 2022-12-25 15:10:33 -05:00
Francis Dinh d9b7219404
Block subdomains of blocked hosts 2022-12-24 14:46:09 -05:00
skeh 3ff6433fab Merge pull request 'hotfix/misskey-forkbomb' (#8) from hotfix/misskey-forkbomb into stage
Reviewed-on: https://code.vtopia.live/Vtopia/MissV/pulls/8
2022-12-01 00:30:55 -08:00
ThatOneCalculator b383c904b2 change to click.self 2022-10-28 10:52:13 -07:00
nullobsi a03f13fb3f
Add Secure Mode and Private Mode
- Add instance actor
- Add private mode, which uses an allowlist
- Add Secure Mode, restricts access to blocked instances
2022-09-06 20:46:41 -07:00
Johann150 9954c054a7
fix: ensure resolver does not fetch local resources via HTTP(S) (#8733)
* refactor: parseUri types and checks

The type has been refined to better represent what it actually is. Uses of
parseUri are now also checking the parsed object type before resolving.

* cannot resolve URLs with fragments

* also take remaining part of URL into account

Needed for parsing the follows URIs.

* Resolver uses DbResolver for local

* remove unnecessary use of DbResolver

Using DbResolver would mean that the URL is parsed and handled again.
This duplicated processing can be avoided by querying the database directly.

* fix missing property name
2022-06-04 11:29:20 +09:00
syuilo 2d2b3edaaf refactor: fix type 2022-04-17 13:26:31 +09:00
syuilo d071d18dd7
refactor: Use ESM (#8358)
* wip

* wip

* fix

* clean up

* Update tsconfig.json

* Update activitypub.ts

* wip
2022-02-27 11:07:39 +09:00
syuilo 0e4a111f81 refactoring
Resolve #7779
2021-11-12 02:02:25 +09:00
Renamed from src/remote/activitypub/resolver.ts (Browse further)