forked from mirror/misskey
25052164c0
* fix(backend): Fix an issue where the origin of ActivityPub lookup response was not validated correctly. [GHSA-6w2c-vf6f-xf26](https://github.com/misskey-dev/misskey/security/advisories/GHSA-6w2c-vf6f-xf26) Signed-off-by: eternal-flame-AD <yume@yumechi.jp> * Enhance: Add configuration option to disable all external redirects when responding to an ActivityPub lookup (config.disallowExternalApRedirect) Signed-off-by: eternal-flame-AD <yume@yumechi.jp> * fixup! fix(backend): Fix an issue where the origin of ActivityPub lookup response was not validated correctly. * docs & one edge case Signed-off-by: eternal-flame-AD <yume@yumechi.jp> * apply suggestions Signed-off-by: eternal-flame-AD <yume@yumechi.jp> * remove stale frontend reference to _responseInvalidIdHostNotMatch Signed-off-by: eternal-flame-AD <yume@yumechi.jp> * apply suggestions Signed-off-by: eternal-flame-AD <yume@yumechi.jp> --------- Signed-off-by: eternal-flame-AD <yume@yumechi.jp> |
||
|---|---|---|
| .. | ||
| .vscode | ||
| assets | ||
| migration | ||
| nsfw-model | ||
| scripts | ||
| src | ||
| test | ||
| test-federation | ||
| test-server | ||
| .madgerc | ||
| .swcrc | ||
| eslint.config.js | ||
| jest.config.cjs | ||
| jest.config.e2e.cjs | ||
| jest.config.fed.cjs | ||
| jest.config.unit.cjs | ||
| jsconfig.json | ||
| ormconfig.js | ||
| package.json | ||
| README.md | ||
| tsconfig.json | ||
Misskey Backend
