From f629b20f2db3d0db796b4c3547385d16f865cafb Mon Sep 17 00:00:00 2001 From: Julian Lam Date: Fri, 5 Jul 2024 13:49:16 -0400 Subject: [PATCH] fix: tighten up logic in checkToPid internal method --- src/posts/create.js | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/posts/create.js b/src/posts/create.js index af1ea92c25..b42b2cedc3 100644 --- a/src/posts/create.js +++ b/src/posts/create.js @@ -8,6 +8,7 @@ const topics = require('../topics'); const categories = require('../categories'); const groups = require('../groups'); const privileges = require('../privileges'); +const activitypub = require('../activitypub'); const utils = require('../utils'); module.exports = function (Posts) { @@ -82,8 +83,8 @@ module.exports = function (Posts) { } async function checkToPid(toPid, uid) { - if (!utils.isNumber(toPid)) { - return; + if (!utils.isNumber(toPid) && !activitypub.helpers.isUri(toPid)) { + throw new Error('[[error:invalid-pid]]'); } const [toPost, canViewToPid] = await Promise.all([