f1337d8159refetch_object (used for poll updates) accepted whatever the remote served. A hostile server could swap in another object or move the post to another author. The refetch now goes to the stored id without redirects, and the returned id and actor must equal the stored ones. Based on Akkoma 9061d148b and fee57eb37.
1 line
71 B
Text
1 line
71 B
Text
Do not let a refetched object (such as a poll) change its id or author
|