Explorar o código

Update FederationController, return 404 for invalid webfinger addresses. Fixes #2647

Daniel Supernault %!s(int64=4) %!d(string=hai) anos
pai
achega
deb6f1153f
Modificáronse 1 ficheiros con 2 adicións e 2 borrados
  1. 2 2
      app/Http/Controllers/FederationController.php

+ 2 - 2
app/Http/Controllers/FederationController.php

@@ -53,8 +53,8 @@ class FederationController extends Controller
 
         $resource = $request->input('resource');
         $parsed = Nickname::normalizeProfileUrl($resource);
-        if($parsed['domain'] !== config('pixelfed.domain.app')) {
-            abort(400);
+        if(empty($parsed) || $parsed['domain'] !== config('pixelfed.domain.app')) {
+            abort(404);
         }
         $username = $parsed['username'];
         $profile = Profile::whereNull('domain')->whereUsername($username)->firstOrFail();