Diogo Cordeiro 4d171b27a4 [ActivityPub][NOTE] Do not extract actor from attributedTo ...

There was no checking of attributedTo, actors and referent object IDs to make
sure they exist in the same domain. Therefore, one could spoof messages from
people by doing attributedTo: whoever-i-want-to-spoof

2020-07-05 15:38:12 +01:00

..

Activitypub_accept.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2019-08-21 16:46:39 +01:00

Activitypub_announce.php

[ActivityPub] Properly handle Actor URIs by using events correctly

2019-12-10 23:50:56 +00:00

Activitypub_attachment.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2019-08-21 16:46:39 +01:00

Activitypub_create.php

[ActivityPub] The protocol allows content to be null, GNU social doesn't, we'll reject silentiously

2019-10-11 19:09:12 +01:00

Activitypub_delete.php

[ActivityPub] Handle DELETE-Person activity

2019-09-03 03:26:35 +01:00

Activitypub_error.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2019-08-21 16:46:39 +01:00

Activitypub_follow.php

[ActivityPub] Properly handle Actor URIs by using events correctly

2019-12-10 23:50:56 +00:00

Activitypub_like.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2019-08-21 16:46:39 +01:00

Activitypub_mention_tag.php

[ActivityPub] The protocol allows content to be null, GNU social doesn't, we'll reject silentiously

2019-10-11 19:09:12 +01:00

Activitypub_message.php

[ActivityPub] Properly handle Actor URIs by using events correctly

2019-12-10 23:50:56 +00:00

Activitypub_notice.php

[ActivityPub][NOTE] Do not extract actor from attributedTo

2020-07-05 15:38:12 +01:00

Activitypub_reject.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2019-08-21 16:46:39 +01:00

Activitypub_tag.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2019-08-21 16:46:39 +01:00

Activitypub_undo.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2019-08-21 16:46:39 +01:00