Friendica/friendica-github
1
0
Fork 0
mirror of https://github.com/friendica/friendica synced 2025-04-24 07:10:11 +00:00
Code Issues Projects Releases Packages Wiki Activity

Only use and accept valid http links as links to an external resource

Browse source
This commit is contained in:
Michael 2022-04-03 07:21:36 +00:00
parent e9a6c4a7e3
commit 029daef997
3 changed files with 27 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/Protocol/ActivityPub/Receiver.php
View file

@ -37,6 +37,7 @@ use Friendica\Protocol\ActivityPub;
use Friendica\Util\HTTPSignature;
use Friendica\Util\JsonLD;
use Friendica\Util\LDSignature;
use Friendica\Util\Network;
use Friendica\Util\Strings;
/**
@ -1533,6 +1534,10 @@ class Receiver
}
}
if (!empty($object_data['alternate-url']) && !Network::isValidHttpUrl($object_data['alternate-url'])) {
$object_data['alternate-url'] = null;
}
if (in_array($object_data['object_type'], ['as:Audio', 'as:Video'])) {
$object_data['alternate-url'] = self::extractAlternateUrl($object['as:url'] ?? []) ?: $object_data['alternate-url'];
$object_data['attachments'] = array_merge($object_data['attachments'], self::processAttachmentUrls($object['as:url'] ?? []));