Merge pull request from GHSA-3fjr-858r-92rw

* Fix insufficient origin validation

* Bump version to v4.1.13
This commit is contained in:
Claire 2024-02-01 15:56:46 +01:00 committed by GitHub
commit 5799bc4af7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
20 changed files with 48 additions and 47 deletions

View file

@ -274,7 +274,7 @@ class ActivityPub::ProcessAccountService < BaseService
def moved_account
account = ActivityPub::TagManager.instance.uri_to_resource(@json['movedTo'], Account)
account ||= ActivityPub::FetchRemoteAccountService.new.call(@json['movedTo'], id: true, break_on_redirect: true, request_id: @options[:request_id])
account ||= ActivityPub::FetchRemoteAccountService.new.call(@json['movedTo'], break_on_redirect: true, request_id: @options[:request_id])
account
end