Update helpers

This commit is contained in:
Daniel Supernault 2018-12-25 22:05:47 -07:00
parent 8c2fa76c7d
commit e2b782466d
No known key found for this signature in database
GPG key ID: 0DEF1C662C9033F7

View file

@ -210,6 +210,18 @@ class Helpers {
$activity = ['object' => $res];
}
$idDomain = parse_url($activity['id'], PHP_URL_HOST);
$urlDomain = parse_url($url, PHP_URL_HOST);
$actorDomain = parse_url($activity['object']['attributedTo'], PHP_URL_HOST);
if(
$idDomain !== $urlDomain ||
$actorDomain !== $urlDomain ||
$idDomain !== $actorDomain
) {
abort(400, 'Invalid object');
}
$profile = self::profileFirstOrNew($activity['object']['attributedTo']);
if(isset($activity['object']['inReplyTo']) && !empty($activity['object']['inReplyTo']) && $replyTo == true) {
$reply_to = self::statusFirstOrFetch($activity['object']['inReplyTo'], false);