Ostatus_profile::checkAuthorship(): throw ServerException when bogus non-authorship is detected
Similarly to what ActivityUtils::checkAuthorship does; try to ensure that activities from ambiguous OStatus feeds (groups and peopletags) that require explicit authorship don't get in without explicit authors.
This commit is contained in:
parent
5295e8d4de
commit
d2e1a8c706
@ -2150,7 +2150,7 @@ class Ostatus_profile extends Managed_DataObject
|
|||||||
common_log(LOG_WARNING,
|
common_log(LOG_WARNING,
|
||||||
"OStatus: skipping post with group listed ".
|
"OStatus: skipping post with group listed ".
|
||||||
"as author: " . $oprofile->getUri() . " in feed from " . $this->getUri());
|
"as author: " . $oprofile->getUri() . " in feed from " . $this->getUri());
|
||||||
return false;
|
throw new ServerException('Activity author is a non-actor');
|
||||||
}
|
}
|
||||||
} else {
|
} else {
|
||||||
$actor = $activity->actor;
|
$actor = $activity->actor;
|
||||||
|
Loading…
Reference in New Issue
Block a user