Merge pull request #13921 from annando/content-type

Check for activity pub mime types
This commit is contained in:
Hypolite Petovan 2024-02-19 05:57:47 -05:00 committed by GitHub
commit bb7d25dfc9
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 24 additions and 5 deletions

View file

@ -443,9 +443,25 @@ class HTTPSignature
return [];
}
if (!self::isValidContentType($curlResult->getContentType())) {
Logger::notice('Unexpected content type', ['content-type' => $curlResult->getContentType(), 'url' => $request]);
return [];
}
return $content;
}
/**
* Check if the provided content type is a valid LD JSON mime type
*
* @param string $contentType
* @return boolean
*/
public static function isValidContentType(string $contentType): bool
{
return in_array(current(explode(';', $contentType)), ['application/activity+json', 'application/ld+json']);
}
/**
* Fetches raw data for a user
*