mirrors/pleroma
1
0
Fork 0
mirror of https://git.pleroma.social/pleroma/pleroma.git synced 2024-12-23 00:26:30 +00:00
Code Issues Projects Releases Wiki Activity

Test more types we do not want to receive from strangers

Browse source
This commit is contained in:
Mark Felder 2024-08-29 14:40:45 -04:00
parent 2b39956acb
commit 012132303f
1 changed files with 17 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
test/pleroma/web/activity_pub/activity_pub_controller_test.exs
View file

@ -688,21 +688,25 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubControllerTest do
# we capture all the params and process it later in the Oban job. # we capture all the params and process it later in the Oban job.
# Once we begin processing it through Oban we risk fetching the actor to validate the # Once we begin processing it through Oban we risk fetching the actor to validate the
# activity which just leads to inserting a new user to process a Delete not relevant to us. # activity which just leads to inserting a new user to process a Delete not relevant to us.
test "Deletes from an unknown actor are discarded", %{conn: conn} do test "Activities of certain types from an unknown actor are discarded", %{conn: conn} do
params = example_bad_types = ["Announce", "Delete", "Undo"]
%{
"type" => "Delete",
"actor" => "https://unknown.mastodon.instance/users/somebody"
}
|> Jason.encode!()
conn Enum.each(example_bad_types, fn bad_type ->
|> assign(:valid_signature, false) params =
|> put_req_header("content-type", "application/activity+json") %{
|> post("/inbox", params) "type" => bad_type,
|> json_response(400) "actor" => "https://unknown.mastodon.instance/users/somebody"
}
|> Jason.encode!()
assert all_enqueued() == [] conn
|> assign(:valid_signature, false)
|> put_req_header("content-type", "application/activity+json")
|> post("/inbox", params)
|> json_response(400)
assert all_enqueued() == []
end)
end end
test "accepts Add/Remove activities", %{conn: conn} do test "accepts Add/Remove activities", %{conn: conn} do