hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix(activitypub): do not require the personal inbox owner to be addressed

Browse source 
Bridgy Fed delivers Follow and Accept to the personal inbox addressed
only to Public. Any server can already address a local user directly,
so the check gave no protection. Ported from Akkoma 2b885288f.

Co-authored-by: Oneric <oneric@oneric.stub>
This commit is contained in:
Lain Soykaf 2026-10-31 15:37:41 +04:00
commit e0546f188d
No known key found for this signature in database
5 changed files with 25 additions and 85 deletions
Download patch file Download diff file Expand all files Collapse all files

1
changelog.d/personal-inbox-addressing.fix Normal file
View file

@ -0,0 +1 @@
Accept activities delivered to a personal inbox that do not address the inbox owner (fixes Bridgy Fed follows)