jimzah/conduit
1
0
Fork 0
mirror of https://gitlab.com/famedly/conduit.git synced 2024-11-26 19:22:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: Do not allow fetching cached remote users' profiles over federation

Browse Source
This commit is contained in:
Nyaaori 2022-12-21 17:46:01 +01:00
parent 3ac3bdbac0
commit f458916919
No known key found for this signature in database
GPG Key ID: E7819C3ED4D1F82E
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/api/server_server.rs
View File

@ -1716,6 +1716,13 @@ pub async fn get_profile_information_route(
return Err(Error::bad_config("Federation is disabled."));
}
if body.user_id.server_name() != services().globals.server_name() {
return Err(Error::BadRequest(
ErrorKind::NotFound,
"User does not belong to this server",
));
}
let mut displayname = None;
let mut avatar_url = None;
let mut blurhash = None;