diff options
| author |  tobi <31960611+tsmethurst@users.noreply.github.com> | 2022-05-23 11:46:50 +0200 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2022-05-23 11:46:50 +0200 |
| commit | 469da93678b3f738f65372d13dcd1ea7de390063 (patch) | |
| tree | 33d6b5b9facd3cf242235fbfb5f9275051864923 /internal/db | |
| parent | [docs] Add Caddy instructions to the documentation (#594) (diff) | |
| download | gotosocial-469da93678b3f738f65372d13dcd1ea7de390063.tar.xz | |
[security] Check all involved IRIs during block checking (#593)
* tidy up context keys, add otherInvolvedIRIs
* add ReplyToable interface
* skip block check if we own the requesting domain
* add block check for other involved IRIs
* use cacheable status fetch
* remove unused ContextActivity
* remove unused ContextActivity
* add helper for unique URIs
* check through CCs and clean slice
* add GetAccountIDForStatusURI
* add GetAccountIDForAccountURI
* check blocks on involved account
* add statuses to tests
* add some blocked tests
* go fmt
* extract Tos as well as CCs
* test PostInboxRequestBodyHook
* add some more testActivities
* deduplicate involvedAccountIDs
* go fmt
* use cacheable db functions, remove new functions
Diffstat (limited to 'internal/db')
| -rw-r--r-- | internal/db/bundb/domain.go | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/internal/db/bundb/domain.go b/internal/db/bundb/domain.go index e63a584bd..9ddd33b05 100644 --- a/internal/db/bundb/domain.go +++ b/internal/db/bundb/domain.go @@ -23,6 +23,8 @@ import ( "net/url" "strings" + "github.com/spf13/viper" + "github.com/superseriousbusiness/gotosocial/internal/config" "github.com/superseriousbusiness/gotosocial/internal/db" "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" "github.com/superseriousbusiness/gotosocial/internal/util" @@ -33,7 +35,7 @@ type domainDB struct { } func (d *domainDB) IsDomainBlocked(ctx context.Context, domain string) (bool, db.Error) { - if domain == "" { + if domain == "" || domain == viper.GetString(config.Keys.Host) { return false, nil } |