akkoma-cachapa

Commit Graph

Author	SHA1	Message	Date
rinpatch	6ca709816f	Fix object spoofing vulnerability in attachments Validate the content-type of the response when fetching an object, according to https://www.w3.org/TR/activitypub/#x3-2-retrieving-objects. content-type headers had to be added to many mocks in order to support this, some of this was done with a regex. While I did go over the resulting files to check I didn't modify anything unrelated, there is a possibility I missed something. Closes pleroma#1948	4 years ago
Mark Felder	40f3cdc030	JPEG content_type must be image/jpeg	4 years ago
Alexander Strizhakov	7dffaef479	tests consistency	4 years ago

Author

SHA1

Message

Date

rinpatch

6ca709816f

Fix object spoofing vulnerability in attachments

Validate the content-type of the response when fetching an object,
according to https://www.w3.org/TR/activitypub/#x3-2-retrieving-objects.

content-type headers had to be added to many mocks in order to support
this, some of this was done with a regex. While I did go over the
resulting files to check I didn't modify anything unrelated, there is a
 possibility I missed something.

Closes pleroma#1948

Mark Felder

40f3cdc030

JPEG content_type must be image/jpeg

Alexander Strizhakov

7dffaef479

tests consistency

3 Commits (b1fc9fe95164add471da2e1906d5fbaa980763a3)