GoToSocial/internal/federation/dereferencing
kim d85727e184
[bugfix] check remote status permissibility (#2703)
* add more stringent checks for remote status permissibility

* add check for inreplyto of a remote status being a boost

* do not permit inReplyTo boost wrapper statuses

* change comment wording

* fix calls to NewFederator()

* add code comments for NotPermitted() and SetNotPermitted()

* improve comment

* check that existing != nil before attempting delete

* ensure replying account isn't suspended

* use a debug log instead of info. check for boost using ID

* shorten log string length. make info level

* add note that replying to boost wrapper status shouldn't be able to happen anyways

* update to use onFail() function
2024-03-04 12:30:12 +00:00
..
account_test.go [bugfix] add stricter checks during all stages of dereferencing remote AS objects (#2639) 2024-02-14 12:13:38 +01:00
account.go [bugfix] 2643 bug search for account url doesnt always work when redirected (#2673) 2024-02-23 16:24:40 +01:00
announce.go [bugfix] 2643 bug search for account url doesnt always work when redirected (#2673) 2024-02-23 16:24:40 +01:00
collection.go [bugfix] 2643 bug search for account url doesnt always work when redirected (#2673) 2024-02-23 16:24:40 +01:00
dereferencer_test.go [bugfix] check remote status permissibility (#2703) 2024-03-04 12:30:12 +00:00
dereferencer.go [bugfix] check remote status permissibility (#2703) 2024-03-04 12:30:12 +00:00
emoji_test.go [chore] Improve copyright header handling (#1608) 2023-03-12 16:00:57 +01:00
emoji.go [chore] Move DoOnce func wrapper to util (#2613) 2024-02-09 11:38:51 +00:00
finger.go [bugfix] add stricter checks during all stages of dereferencing remote AS objects (#2639) 2024-02-14 12:13:38 +01:00
handshake.go [chore/security] refactor AuthenticateFederatedRequest() to handle account deref + suspension checks (#2371) 2023-11-21 11:35:30 +01:00
instance.go [chore] de-interface{} the federator and dereferencer structs (#2285) 2023-10-23 10:58:13 +01:00
status_test.go [bugfix] add stricter checks during all stages of dereferencing remote AS objects (#2639) 2024-02-14 12:13:38 +01:00
status.go [bugfix] check remote status permissibility (#2703) 2024-03-04 12:30:12 +00:00
thread.go [bugfix] 2643 bug search for account url doesnt always work when redirected (#2673) 2024-02-23 16:24:40 +01:00
util.go [chore] Move DoOnce func wrapper to util (#2613) 2024-02-09 11:38:51 +00:00