Diogo Cordeiro 64108aa51d [ActivityPub][NOTE] Do not extract actor from attributedTo ...

There was no checking of attributedTo, actors and referent object IDs to make
sure they exist in the same domain. Therefore, one could spoof messages from
people by doing attributedTo: whoever-i-want-to-spoof

2021-07-16 19:44:37 +01:00

..

Activitypub_accept.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2021-07-16 19:44:33 +01:00

Activitypub_announce.php

[ActivityPub] Properly handle Actor URIs by using events correctly

2021-07-16 19:44:36 +01:00

Activitypub_attachment.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2021-07-16 19:44:33 +01:00

Activitypub_create.php

[ActivityPub] The protocol allows content to be null, GNU social doesn't, we'll reject silentiously

2021-07-16 19:44:35 +01:00

Activitypub_delete.php

[ActivityPub] Handle DELETE-Person activity

2021-07-16 19:44:34 +01:00

Activitypub_error.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2021-07-16 19:44:33 +01:00

Activitypub_follow.php

[ActivityPub] Properly handle Actor URIs by using events correctly

2021-07-16 19:44:36 +01:00

Activitypub_like.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2021-07-16 19:44:33 +01:00

Activitypub_mention_tag.php

[ActivityPub] The protocol allows content to be null, GNU social doesn't, we'll reject silentiously

2021-07-16 19:44:35 +01:00

Activitypub_message.php

[ActivityPub] Properly handle Actor URIs by using events correctly

2021-07-16 19:44:36 +01:00

Activitypub_notice.php

[ActivityPub][NOTE] Do not extract actor from attributedTo

2021-07-16 19:44:37 +01:00

Activitypub_reject.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2021-07-16 19:44:33 +01:00

Activitypub_tag.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2021-07-16 19:44:33 +01:00

Activitypub_undo.php

[ActivityPub] Move models from 'classes' to 'lib/models'

2021-07-16 19:44:33 +01:00