barkey/packages/backend/src/server
饺子w (Yumechi) 25052164c0
Merge commit from fork
* fix(backend): Fix an issue where the origin of ActivityPub lookup response was not validated correctly.

[GHSA-6w2c-vf6f-xf26](https://github.com/misskey-dev/misskey/security/advisories/GHSA-6w2c-vf6f-xf26)

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* Enhance: Add configuration option to disable all external redirects when responding to an ActivityPub lookup (config.disallowExternalApRedirect)

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* fixup! fix(backend): Fix an issue where the origin of ActivityPub lookup response was not validated correctly.

* docs & one edge case

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* apply suggestions

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* remove stale frontend reference to _responseInvalidIdHostNotMatch

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* apply suggestions

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

---------

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>
2025-02-23 19:21:34 +09:00
..
api Merge commit from fork 2025-02-23 19:21:34 +09:00
assets なんかもうめっちゃ変えた 2022-09-18 03:27:08 +09:00
oauth (re) update SPDX-FileCopyrightText 2024-02-13 15:59:27 +00:00
web enhance(frontend): クライアントエラー画面の多言語対応 (#15411) 2025-02-08 08:31:28 +00:00
ActivityPubServerService.ts fix(backend): apOrHtml Constraintが正しく評価されない問題を修正 (#15213) 2025-01-08 10:35:09 +00:00
FileServerService.ts Merge commit from fork 2024-10-22 18:17:56 +09:00
HealthServerService.ts Misskey® Reactions Buffering Technology™ (#14579) 2024-09-20 21:03:53 +09:00
NodeinfoServerService.ts fix(backend): memory leak in memory caches (#14363) 2024-08-18 13:34:01 +09:00
ServerModule.ts Add Sign in with passkey Button (#14577) 2024-09-26 08:25:33 +09:00
ServerService.ts Merge commit from fork 2025-02-23 19:21:34 +09:00
WellKnownServerService.ts (re) update SPDX-FileCopyrightText 2024-02-13 15:59:27 +00:00