pleroma/lib/pleroma/workers/mailer_worker.ex
feld ea0196a35e Merge branch 'defuse-binary' into 'develop'
Draft: Fix RCE via erlang.binary_to_term

See merge request pleroma/pleroma!4203
2025-03-21 16:20:21 +00:00

18 lines
561 B
Elixir

# Pleroma: A lightweight social networking server
# Copyright © 2017-2022 Pleroma Authors <https://pleroma.social/>
# SPDX-License-Identifier: AGPL-3.0-only
defmodule Pleroma.Workers.MailerWorker do
use Oban.Worker, queue: :background
@impl true
def perform(%Job{args: %{"op" => "email", "encoded_email" => encoded_email, "config" => config}}) do
encoded_email
|> Base.decode64!()
|> Plug.Crypto.non_executable_binary_to_term()
|> Pleroma.Emails.Mailer.deliver(config)
end
@impl true
def timeout(_job), do: :timer.seconds(5)
end