mirrors/takahe
1
1
Fork 0
mirror of https://github.com/jointakahe/takahe.git synced 2024-11-25 08:41:00 +00:00
Code Issues Projects Releases Packages Wiki Activity

Ensure expected fields exist for Post.by_ap

Browse source
This commit is contained in:
Michael Manfre 2023-01-25 22:59:50 -05:00 committed by Andrew Godwin
parent 6437a5aeb7
commit 773c9b2afc
1 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
activities/models/post.py
View file

@ -755,11 +755,20 @@ class Post(StatorModel):
or it's from a blocked domain. or it's from a blocked domain.
""" """
try: try:
# Ensure data has the primary fields of all Posts
if (
not isinstance(data["id"], str)
or not isinstance(data["attributedTo"], str)
or not isinstance(data["type"], str)
):
raise TypeError()
# Ensure the domain of the object's actor and ID match to prevent injection # Ensure the domain of the object's actor and ID match to prevent injection
if urlparse(data["id"]).hostname != urlparse(data["attributedTo"]).hostname: if urlparse(data["id"]).hostname != urlparse(data["attributedTo"]).hostname:
raise ValueError("Object's ID domain is different to its author") raise ValueError("Object's ID domain is different to its author")
except (TypeError, KeyError): except (TypeError, KeyError) as ex:
raise ValueError("Object data is not a recognizable ActivityPub object") raise cls.DoesNotExist(
"Object data is not a recognizable ActivityPub object"
) from ex
# Do we have one with the right ID? # Do we have one with the right ID?
created = False created = False