chinwag/chinwagsocial
chinwag/chinwagsocial
2
0
Fork 0
Code Issues Pull requests Releases 14 Wiki Activity

Change quote verification to not bypass authorization flow for mentions (#35528)

Browse source
This commit is contained in:
Claire 2025-07-25 18:50:38 +02:00
commit 6ff4e83937
5 changed files with 6 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

3
app/lib/activitypub/parser/status_parser.rb
View file

@ -152,9 +152,6 @@ class ActivityPub::Parser::StatusParser
# Remove the special-meaning actor URI
allowed_actors.delete(@options[:actor_uri])
# Tagged users are always allowed, so remove them
allowed_actors -= as_array(@object['tag']).filter_map { |tag| tag['href'] if equals_or_includes?(tag['type'], 'Mention') }
# Any unrecognized actor is marked as unknown
flags |= Status::QUOTE_APPROVAL_POLICY_FLAGS[:unknown] unless allowed_actors.empty?