Commit Graph

11 Commits

Author SHA1 Message Date
ThatOneCalculator 6b00abf05c
refactor: 🎨 rome 2023-01-12 20:40:33 -08:00
Johann150 d7390e09ff
activitypub: block check for resolving collections 2022-12-25 15:10:44 -05:00
Francis Dinh d2066d0d86
add checks to resolver and performOneActivity 2022-12-25 15:10:33 -05:00
Francis Dinh d9b7219404
Block subdomains of blocked hosts 2022-12-24 14:46:09 -05:00
skeh 3ff6433fab Merge pull request 'hotfix/misskey-forkbomb' (#8) from hotfix/misskey-forkbomb into stage
Reviewed-on: https://code.vtopia.live/Vtopia/MissV/pulls/8
2022-12-01 00:30:55 -08:00
ThatOneCalculator b383c904b2 change to click.self 2022-10-28 10:52:13 -07:00
nullobsi a03f13fb3f
Add Secure Mode and Private Mode
- Add instance actor
- Add private mode, which uses an allowlist
- Add Secure Mode, restricts access to blocked instances
2022-09-06 20:46:41 -07:00
Johann150 9954c054a7
fix: ensure resolver does not fetch local resources via HTTP(S) (#8733)
* refactor: parseUri types and checks

The type has been refined to better represent what it actually is. Uses of
parseUri are now also checking the parsed object type before resolving.

* cannot resolve URLs with fragments

* also take remaining part of URL into account

Needed for parsing the follows URIs.

* Resolver uses DbResolver for local

* remove unnecessary use of DbResolver

Using DbResolver would mean that the URL is parsed and handled again.
This duplicated processing can be avoided by querying the database directly.

* fix missing property name
2022-06-04 11:29:20 +09:00
syuilo 2d2b3edaaf refactor: fix type 2022-04-17 13:26:31 +09:00
syuilo d071d18dd7
refactor: Use ESM (#8358)
* wip

* wip

* fix

* clean up

* Update tsconfig.json

* Update activitypub.ts

* wip
2022-02-27 11:07:39 +09:00
syuilo 0e4a111f81 refactoring
Resolve #7779
2021-11-12 02:02:25 +09:00