hj/pleroma - Forgejo

hj/pleroma

1 line

71 B

Text

Raw Normal View History

fix(fetcher): keep id and author fixed when refetching objects refetch_object (used for poll updates) accepted whatever the remote served. A hostile server could swap in another object or move the post to another author. The refetch now goes to the stored id without redirects, and the returned id and actor must equal the stored ones. Based on Akkoma 9061d148b and fee57eb37.

2026-10-27 21:46:14 +04:00

Do not let a refetched object (such as a poll) change its id or author