GNUsocial/gnu-social-v2-archive-activitypub-plugin
Archived
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

No XSS

Browse Source
This commit is contained in:
Diogo Cordeiro 2018-08-01 01:32:41 +01:00
parent 6943eee623
commit 42bfb78184
3 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
actions/inbox/Create.php
View File

@ -144,7 +144,7 @@ ToSelector::fillActivity($this, $act, $options);
$actobj = new ActivityObject();
$actobj->type = ActivityObject::NOTE;
$actobj->content = $content; //common_render_content($content, $actor_profile, $inReplyTo);
$actobj->content = strip_tags($content,'<p><b><i><u><a><ul><ol><li>');
// Finally add the activity object to our activity
$act->objects[] = $actobj;

2
actions/inbox/Like.php
View File

@ -36,7 +36,7 @@ try {
ActivityPubReturn::error("Invalid Object specified.");
}
Fave::addNew($actor_profile, $object_notice);
ActivityPubReturn::answer(Activitypub_like::like_to_array($data->actor, $object_notice));
ActivityPubReturn::answer(Activitypub_like::like_to_array($data->actor, $data->object));
} catch (Exception $e) {
ActivityPubReturn::error($e->getMessage(), 403);
}

6
actions/inbox/Undo.php
View File

@ -76,11 +76,11 @@ case "Follow":
Activitypub_accept::accept_to_array(
Activitypub_follow::follow_to_array(
$actor_profile->getUrl(),
$object_profile->getUrl()
$object_profile->getUrl()
)
)
)
);
)
);
} else {
ActivityPubReturn::error("You are not following this person already.", 409);
}