From d2e1a8c706aff9fab34dc6269499a7a28a09522b Mon Sep 17 00:00:00 2001 From: Joshua Judson Rosen Date: Sun, 23 Nov 2014 18:02:20 -0500 Subject: [PATCH] Ostatus_profile::checkAuthorship(): throw ServerException when bogus non-authorship is detected Similarly to what ActivityUtils::checkAuthorship does; try to ensure that activities from ambiguous OStatus feeds (groups and peopletags) that require explicit authorship don't get in without explicit authors. --- plugins/OStatus/classes/Ostatus_profile.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugins/OStatus/classes/Ostatus_profile.php b/plugins/OStatus/classes/Ostatus_profile.php index d93d896838..e31378e222 100644 --- a/plugins/OStatus/classes/Ostatus_profile.php +++ b/plugins/OStatus/classes/Ostatus_profile.php @@ -2150,7 +2150,7 @@ class Ostatus_profile extends Managed_DataObject common_log(LOG_WARNING, "OStatus: skipping post with group listed ". "as author: " . $oprofile->getUri() . " in feed from " . $this->getUri()); - return false; + throw new ServerException('Activity author is a non-actor'); } } else { $actor = $activity->actor;