瀏覽代碼

Update ActivityPubFetchService, add url validation

Daniel Supernault 4 年之前
父節點
當前提交
654b08d382
共有 1 個文件被更改,包括 4 次插入0 次删除
  1. 4 0
      app/Services/ActivityPubFetchService.php

+ 4 - 0
app/Services/ActivityPubFetchService.php

@@ -11,6 +11,10 @@ class ActivityPubFetchService
 {
 	public static function get($url)
 	{
+		if(!Helpers::validateUrl($url)) {
+			return 0;
+		}
+
 		$headers = HttpSignature::instanceActorSign($url, false, [
 			'Accept'		=> 'application/activity+json, application/json',
 			'User-Agent'	=> '(Pixelfed/'.config('pixelfed.version').'; +'.config('app.url').')'