Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-09-02 11:46:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: temporarily deny handling non-public notes

Browse Source
This commit is contained in:
Julian Lam
2024-02-21 14:58:52 -05:00
parent 49c69a0f6a
commit eaba2aa37f
3 changed files with 14 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/activitypub/inbox.js
View File

@@ -19,6 +19,11 @@ inbox.create = async (req) => {
const { object } = req.body;
const postData = await activitypub.mocks.post(object);
// Temporary, reject non-public notes.
if (![...postData._activitypub.to, ...postData._activitypub.cc].includes(activitypub._constants.publicAddress)) {
throw new Error('[[error:activitypub.not-implemented]]');
}
if (postData) {
await activitypub.notes.assert(0, [postData]);
const tid = await activitypub.notes.assertTopic(0, postData.pid);

9
src/controllers/activitypub/index.js
View File

@@ -4,6 +4,7 @@ const nconf = require('nconf');
const user = require('../../user');
const activitypub = require('../../activitypub');
const helpers = require('../helpers');
const Controller = module.exports;
@@ -117,6 +118,10 @@ Controller.postInbox = async (req, res) => {
return res.sendStatus(501);
}
await activitypub.inbox[method](req);
res.sendStatus(200);
try {
await activitypub.inbox[method](req);
helpers.formatApiResponse(200, res);
} catch (e) {
helpers.formatApiResponse(500, res, e);
}
};