mirrors/pleroma
1
0
Fork 0
mirror of https://git.pleroma.social/pleroma/pleroma.git synced 2025-04-14 23:15:20 +00:00
Code Issues Projects Releases Wiki Activity

Ditch "safe" as terms that are not "safe" for deserialization are used.

Browse source
This commit is contained in:
Offensive Boomer 2023-08-08 09:48:26 +00:00 committed by Mark Felder
parent 62fe3014e4
commit 78a7af4f0c
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/pleroma/captcha.ex
View file

@ -66,7 +66,7 @@ defmodule Pleroma.Captcha do
with false <- is_nil(answer_data),
{:ok, data} <- MessageEncryptor.decrypt(answer_data, secret, sign_secret),
%{at: at, answer_data: answer_md5} <- Plug.Crypto.non_executable_binary_to_term(data, [:safe]) do
%{at: at, answer_data: answer_md5} <- Plug.Crypto.non_executable_binary_to_term(data) do
{:ok, %{at: at, answer_data: answer_md5}}
else
_ -> {:error, :invalid_answer_data}

2
lib/pleroma/workers/mailer_worker.ex
View file

@ -9,7 +9,7 @@ defmodule Pleroma.Workers.MailerWorker do
def perform(%Job{args: %{"op" => "email", "encoded_email" => encoded_email, "config" => config}}) do
encoded_email
|> Base.decode64!()
|> Plug.Crypto.non_executable_binary_to_term([:safe])
|> Plug.Crypto.non_executable_binary_to_term()
|> Pleroma.Emails.Mailer.deliver(config)
end