Browse Source

Update FederationController, return 404 for invalid webfinger addresses. Fixes #2647

Daniel Supernault 4 years ago
parent
commit
deb6f1153f
1 changed files with 2 additions and 2 deletions
  1. 2 2
      app/Http/Controllers/FederationController.php

+ 2 - 2
app/Http/Controllers/FederationController.php

@@ -53,8 +53,8 @@ class FederationController extends Controller
 
         $resource = $request->input('resource');
         $parsed = Nickname::normalizeProfileUrl($resource);
-        if($parsed['domain'] !== config('pixelfed.domain.app')) {
-            abort(400);
+        if(empty($parsed) || $parsed['domain'] !== config('pixelfed.domain.app')) {
+            abort(404);
         }
         $username = $parsed['username'];
         $profile = Profile::whereNull('domain')->whereUsername($username)->firstOrFail();