hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pleroma/changelog.d/federation-reject-instances.security

1 line
186 B
Text
Raw Normal View History

fix(federation): do not deliver to instances rejected by SimplePolicy Public activities went to every inbox, so followers on an instance in the SimplePolicy reject list still got our posts. With authorized fetch mode on, signed fetches from those instances were also accepted, unless the instance was in :instance, :rejected_instances too. Check the SimplePolicy reject and accept lists for deliveries and signed fetches, when the policy is enabled. Quarantine keeps its meaning (no private activities). An inbox without a host no longer crashes. Based on the Akkoma changes 90c4785b8, ca000f830, 03662501c and d2b0d8647. Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk> Co-authored-by: Atsuko Karagi <atsuko.karagi@localhost>
2026-10-27 12:33:35 +04:00
Do not deliver activities, including public ones and deletes, to instances rejected by SimplePolicy (or not on its accept list), and refuse their signed fetches in authorized fetch mode
Reference in a new issue Copy permalink