饺子w (Yumechi) 25052164c0
Merge commit from fork
* fix(backend): Fix an issue where the origin of ActivityPub lookup response was not validated correctly.

[GHSA-6w2c-vf6f-xf26](https://github.com/misskey-dev/misskey/security/advisories/GHSA-6w2c-vf6f-xf26)

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* Enhance: Add configuration option to disable all external redirects when responding to an ActivityPub lookup (config.disallowExternalApRedirect)

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* fixup! fix(backend): Fix an issue where the origin of ActivityPub lookup response was not validated correctly.

* docs & one edge case

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* apply suggestions

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* remove stale frontend reference to _responseInvalidIdHostNotMatch

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

* apply suggestions

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>

---------

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>
2025-02-23 19:21:34 +09:00
2025-02-23 19:21:34 +09:00
2022-06-09 00:50:23 +09:00
2025-02-23 19:21:34 +09:00
2025-02-23 19:21:34 +09:00
2024-11-16 15:32:51 +09:00
2024-11-13 19:43:36 +09:00
2018-08-13 00:24:45 +09:00
2025-02-23 19:21:34 +09:00
2023-02-26 14:17:29 +09:00
2025-01-04 14:37:14 +09:00
2022-06-11 15:53:45 +09:00
2018-03-28 22:56:28 +09:00
2025-02-16 09:45:52 +00:00
2019-04-05 18:17:30 +09:00
2024-05-31 20:42:02 +09:00
2024-01-04 08:44:38 +09:00
2025-02-01 13:57:39 +09:00

Misskey logo

🌎 Misskey is an open source, federated social media platform that's free forever! 🚀

Learn more


find an instance create an instance become a contributor join the community become a patron

Thanks

Sentry

Thanks to Sentry for providing the error tracking platform that helps us catch unexpected errors.

Chromatic

Thanks to Chromatic for providing the visual testing platform that helps us review UI changes and catch visual regressions.

Codecov

Thanks to Codecov for providing the code coverage platform that helps us improve our test coverage.

Crowdin

Thanks to Crowdin for providing the localization platform that helps us translate Misskey into many languages.

Docker

Thanks to Docker for providing the container platform that helps us run Misskey in production.

Description
No description provided
https://m.moec.top/
Readme 164 MiB
Languages
TypeScript 63.7%
Vue 29.4%
JavaScript 6.2%
SCSS 0.3%
Pug 0.2%