From d4aa5d9aad54f9e5ddee7a554159ac3d5a6bca18 Mon Sep 17 00:00:00 2001 From: Matthew Exon Date: Thu, 11 Jul 2024 18:18:54 +0200 Subject: [PATCH] Return 400 error code when webfinger request omits resource parameter. Fixes #14292 --- src/Module/Xrd.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Module/Xrd.php b/src/Module/Xrd.php index 7a983538a1..693ba34e2b 100644 --- a/src/Module/Xrd.php +++ b/src/Module/Xrd.php @@ -44,7 +44,7 @@ class Xrd extends BaseModule // @TODO: Replace with parameter from router if (DI::args()->getArgv()[0] == 'xrd') { if (empty($_GET['uri'])) { - return; + throw new BadRequestException(); } $uri = urldecode(trim($_GET['uri'])); @@ -55,7 +55,7 @@ class Xrd extends BaseModule } } else { if (empty($_GET['resource'])) { - return; + throw new BadRequestException(); } $uri = urldecode(trim($_GET['resource']));