pleroma/lib
Phantasm b3887a6fa7
AP C2S: Validate visibility for C2S requests to /users/:nickname/outbox
A local user could previously send Announce/EmojiReact/Like activities
to their outbox referencing objects that aren't visible to them and they
would get processed as if can see them. Only requirement is knowing
the URI of the object and the users instance having C2S enabled (currently
disabled by default).
2025-12-11 23:30:03 +01:00
..
mix Prevent test crash if it cannot successfully remove the console Logger backend 2025-07-22 15:21:20 -07:00
pleroma AP C2S: Validate visibility for C2S requests to /users/:nickname/outbox 2025-12-11 23:30:03 +01:00