mirrors/gotosocial
1
0
Fork 0
mirror of https://github.com/superseriousbusiness/gotosocial.git synced 2025-10-29 16:42:25 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

[bugfix] Use punycode for host part of resource query param when doing webfinger requests (#3133)

Browse source 
* [bugfix] use punycode when webfingering

* account for punycode when checking if final URI matches expected

* hmm

* fix test
This commit is contained in:
tobi 2024-07-26 13:11:07 +02:00 • committed by GitHub
commit ecfea10e35
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
7 changed files with 239 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

21
internal/federation/dereferencing/status.go
View file

@ -467,13 +467,26 @@ func (d *Dereferencer) enrichStatus(
)
}
// Ensure the final parsed status URI / URL matches
// Ensure the final parsed status URI or URL matches
// the input URI we fetched (or received) it as.
if expect := uri.String(); latestStatus.URI != expect &&
latestStatus.URL != expect {
matches, err := util.URIMatches(
uri,
append(
ap.GetURL(apubStatus), // status URL(s)
ap.GetJSONLDId(apubStatus), // status URI
)...,
)
if err != nil {
return nil, nil, gtserror.Newf(
"error checking dereferenced status uri %s: %w",
latestStatus.URI, err,
)
}
if !matches {
return nil, nil, gtserror.Newf(
"dereferenced status uri %s does not match %s",
latestStatus.URI, expect,
latestStatus.URI, uri.String(),
)
}