1
0
forked from mirror/misskey
mi.moris.day/packages/frontend
饺子w (Yumechi) 25052164c0
Merge commit from fork
* fix(backend): Fix an issue where the origin of ActivityPub lookup response was not validated correctly.

[GHSA-6w2c-vf6f-xf26](https://github.com/misskey-dev/misskey/security/advisories/GHSA-6w2c-vf6f-xf26)

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* Enhance: Add configuration option to disable all external redirects when responding to an ActivityPub lookup (config.disallowExternalApRedirect)

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* fixup! fix(backend): Fix an issue where the origin of ActivityPub lookup response was not validated correctly.

* docs & one edge case

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* apply suggestions

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* remove stale frontend reference to _responseInvalidIdHostNotMatch

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* apply suggestions

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

---------

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>
2025-02-23 19:21:34 +09:00
..
.storybook feat(frontend): 画像を投稿前にプレビュー可能に (#15341) 2025-02-08 08:33:09 +00:00
.vscode
@types feat(frontend): ノート・ユーザータイムライン埋め込み (#13929) 2024-09-09 20:57:36 +09:00
assets wip (#14745) 2024-10-11 21:05:53 +09:00
lib refactor(frontend): verbatimModuleSyntaxを有効化 (#15323) 2025-02-05 10:01:44 +00:00
public (re) update SPDX-FileCopyrightText 2024-02-13 15:59:27 +00:00
src Merge commit from fork 2025-02-23 19:21:34 +09:00
test fix(deps): update [frontend] update dependencies (#15489) 2025-02-15 14:54:45 +09:00
.gitignore
eslint.config.js update deps (#15311) 2025-02-15 10:24:22 +09:00
package.json fix(deps): update [frontend] update dependencies (#15504) 2025-02-16 16:47:04 +09:00
tsconfig.json refactor(frontend): verbatimModuleSyntaxを有効化 (#15323) 2025-02-05 10:01:44 +00:00
vite.config.ts revert(dev): フロントエンド・バックエンドを分離する開発モードを廃止 (#15284) 2025-01-25 20:58:39 +09:00
vite.json5.ts
vue-shims.d.ts Fix/vue import error on intellij (#12612) 2023-12-09 13:13:31 +09:00