161sh/trashposs
1
0
Fork 0
mirror of https://iceshrimp.dev/crimekillz/trashposs synced 2024-11-24 09:49:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

[backend] Enforce JSON-LD profile when fetching activities

Browse Source
This commit is contained in:
Laura Hausmann 2024-02-17 15:55:48 +01:00
parent 31122636d3
commit 099ba9ce65
No known key found for this signature in database
GPG Key ID: D044E84C5BE01605
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
packages/backend/src/misc/fetch.ts
View File

@ -48,7 +48,9 @@ export async function getJsonActivity(
});
const contentType = res.headers.get('content-type');
if (contentType == null || (contentType !== 'application/activity+json' && !contentType.startsWith('application/activity+json;') && contentType !== 'application/ld+json' && !contentType.startsWith('application/ld+json;')))
if (contentType == null ||
(contentType !== 'application/activity+json' && !contentType.startsWith('application/activity+json;') &&
(!contentType.startsWith('application/ld+json;') || !contentType.includes('profile="https://www.w3.org/ns/activitystreams"'))))
throw new Error(`getJsonActivity response had unexpected content-type: ${contentType}`);
return {