Status search fetched any http(s) query from its remote server, for anonymous users, on every result page and with resolve=false, so anyone could make the server fetch URLs. As in Mastodon and in Pleroma's user search, fetch only with resolve=true, on the first page, and for anonymous users only if [:instance, :limit_to_local_content] is false. Based on Akkoma ca9e33ed2 and 17efec060. Co-authored-by: Oneric <oneric@oneric.stub>
193 lines
5.4 KiB
Elixir
193 lines
5.4 KiB
Elixir
# Pleroma: A lightweight social networking server
|
|
# Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
defmodule Pleroma.Search.DatabaseSearch do
|
|
alias Pleroma.Activity
|
|
alias Pleroma.Config
|
|
alias Pleroma.Object.Fetcher
|
|
alias Pleroma.Pagination
|
|
alias Pleroma.Repo
|
|
alias Pleroma.User
|
|
alias Pleroma.Web.ActivityPub.Visibility
|
|
|
|
require Pleroma.Constants
|
|
|
|
import Ecto.Query
|
|
|
|
@behaviour Pleroma.Search.SearchBackend
|
|
|
|
@impl true
|
|
def search(user, search_query, options \\ []) do
|
|
index_type = if Config.get([:database, :rum_enabled]), do: :rum, else: :gin
|
|
limit = Enum.min([Keyword.get(options, :limit), 40])
|
|
offset = Keyword.get(options, :offset, 0)
|
|
author = Keyword.get(options, :author)
|
|
|
|
activities =
|
|
try do
|
|
with_fuzzy_limit(fn ->
|
|
Activity
|
|
|> Activity.with_preloaded_object()
|
|
|> Activity.restrict_deactivated_users()
|
|
|> restrict_public(user)
|
|
|> query_with(index_type, search_query)
|
|
|> maybe_restrict_local(user)
|
|
|> maybe_restrict_author(author)
|
|
|> maybe_restrict_blocked(user)
|
|
|> Pagination.fetch_paginated(
|
|
%{"offset" => offset, "limit" => limit, "skip_order" => index_type == :rum},
|
|
:offset
|
|
)
|
|
end)
|
|
rescue
|
|
_ -> []
|
|
end
|
|
|
|
# Outside the query transaction, as it may fetch over the network.
|
|
maybe_fetch(activities, user, search_query, options)
|
|
end
|
|
|
|
@doc """
|
|
Runs `fun` with `gin_fuzzy_search_limit` set, if configured under
|
|
`Pleroma.Search.DatabaseSearch`. The limit makes GIN scans faster but their
|
|
results incomplete and random, so it is only set for search queries.
|
|
"""
|
|
def with_fuzzy_limit(fun) do
|
|
case Config.get([__MODULE__, :gin_fuzzy_search_limit]) do
|
|
limit when is_integer(limit) and limit > 0 ->
|
|
{:ok, result} =
|
|
Repo.transaction(fn ->
|
|
# SET LOCAL takes no parameters; limit is an integer.
|
|
Repo.query!("SET LOCAL gin_fuzzy_search_limit TO #{limit}")
|
|
fun.()
|
|
end)
|
|
|
|
result
|
|
|
|
_ ->
|
|
fun.()
|
|
end
|
|
end
|
|
|
|
@impl true
|
|
def add_to_index(_activity), do: :ok
|
|
|
|
@impl true
|
|
def remove_from_index(_object), do: :ok
|
|
|
|
@impl true
|
|
def create_index, do: :ok
|
|
|
|
@impl true
|
|
def drop_index, do: :ok
|
|
|
|
@impl true
|
|
def healthcheck_endpoints, do: nil
|
|
|
|
def maybe_restrict_author(query, %User{} = author) do
|
|
Activity.Queries.by_author(query, author)
|
|
end
|
|
|
|
def maybe_restrict_author(query, _), do: query
|
|
|
|
def maybe_restrict_blocked(query, %User{} = user) do
|
|
Activity.Queries.exclude_authors(query, User.blocked_users_ap_ids(user))
|
|
end
|
|
|
|
def maybe_restrict_blocked(query, _), do: query
|
|
|
|
defp restrict_public(q, user) when not is_nil(user) do
|
|
intended_recipients = [
|
|
Pleroma.Constants.as_public(),
|
|
Pleroma.Web.ActivityPub.Utils.as_local_public()
|
|
]
|
|
|
|
from([a, o] in q,
|
|
where: fragment("?->>'type' = 'Create'", a.data),
|
|
where: fragment("? && ?", ^intended_recipients, a.recipients)
|
|
)
|
|
end
|
|
|
|
defp restrict_public(q, _user) do
|
|
from([a, o] in q,
|
|
where: fragment("?->>'type' = 'Create'", a.data),
|
|
where: ^Pleroma.Constants.as_public() in a.recipients
|
|
)
|
|
end
|
|
|
|
defp query_with(q, :gin, search_query) do
|
|
%{rows: [[tsc]]} =
|
|
Ecto.Adapters.SQL.query!(
|
|
Pleroma.Repo,
|
|
"select current_setting('default_text_search_config')::regconfig::oid;"
|
|
)
|
|
|
|
from([a, o] in q,
|
|
where:
|
|
fragment(
|
|
"to_tsvector(?::oid::regconfig, ?->>'content') @@ websearch_to_tsquery(?)",
|
|
^tsc,
|
|
o.data,
|
|
^search_query
|
|
),
|
|
order_by: [desc: :inserted_at]
|
|
)
|
|
end
|
|
|
|
defp query_with(q, :rum, search_query) do
|
|
from([a, o] in q,
|
|
where:
|
|
fragment(
|
|
"? @@ websearch_to_tsquery(?)",
|
|
o.fts_content,
|
|
^search_query
|
|
),
|
|
order_by: [fragment("? <=> now()::date", o.inserted_at)]
|
|
)
|
|
end
|
|
|
|
def maybe_restrict_local(q, user) do
|
|
limit = Config.get([:instance, :limit_to_local_content], :unauthenticated)
|
|
|
|
case {limit, user} do
|
|
{:all, _} -> restrict_local(q)
|
|
{:unauthenticated, %User{}} -> q
|
|
{:unauthenticated, _} -> restrict_local(q)
|
|
{false, _} -> q
|
|
end
|
|
end
|
|
|
|
defp restrict_local(q), do: where(q, local: true)
|
|
|
|
@doc """
|
|
Adds the status a URL query points to, fetching it if needed. As in Mastodon,
|
|
this only happens with `resolve: true` and on the first page, and for
|
|
anonymous users only if `[:instance, :limit_to_local_content]` is `false`.
|
|
"""
|
|
def maybe_fetch(activities, user, search_query, options) do
|
|
if fetch_allowed?(user, options),
|
|
do: fetch(activities, user, search_query),
|
|
else: activities
|
|
end
|
|
|
|
defp fetch_allowed?(user, options) do
|
|
options[:resolve] == true and (options[:offset] || 0) == 0 and
|
|
case Config.get([:instance, :limit_to_local_content], :unauthenticated) do
|
|
:all -> false
|
|
:unauthenticated -> match?(%User{}, user)
|
|
false -> true
|
|
end
|
|
end
|
|
|
|
defp fetch(activities, user, search_query) do
|
|
with true <- Regex.match?(~r/https?:/, search_query),
|
|
{:ok, object} <- Fetcher.fetch_object_from_id(search_query),
|
|
%Activity{} = activity <- Activity.get_create_by_object_ap_id(object.data["id"]),
|
|
true <- Visibility.visible_for_user?(activity, user) do
|
|
[activity | activities]
|
|
else
|
|
_ -> activities
|
|
end
|
|
end
|
|
end
|