indymedia
/
epicyon
mirror of https://gitlab.com/bashrc2/epicyon
7
4
Fork 1
Code Issues 14 Releases Wiki Activity

Validate nickname for incoming posts

main
bashrc 2026-04-13 13:27:01 +01:00
parent cabfafa91d
commit 2fd7aeb378
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
daemon_utils.py
View File

@ -29,6 +29,7 @@ from posts import add_to_field
from status import actor_status_expired from status import actor_status_expired
from status import get_actor_status from status import get_actor_status
from mitm import detect_mitm from mitm import detect_mitm
from utils import valid_nickname
from utils import is_yggdrasil_url from utils import is_yggdrasil_url
from utils import data_dir from utils import data_dir
from utils import load_json from utils import load_json
@ -275,6 +276,26 @@ def update_inbox_queue(self, nickname: str, message_json: {},
self.server.postreq_busy = False self.server.postreq_busy = False
return 3 return 3
actor_nickname = get_nickname_from_actor(actor_url)
if not actor_nickname:
print('INBOX: no actor nickname ' + actor_url)
http_400(self)
self.server.postreq_busy = False
return 3
actor_domain, _ = get_domain_from_actor(actor_url)
if not actor_domain:
print('INBOX: no actor domain ' + actor_url)
http_400(self)
self.server.postreq_busy = False
return 3
if not valid_nickname(actor_domain, actor_nickname):
print('INBOX: invalid nickname ' + actor_url)
http_400(self)
self.server.postreq_busy = False
return 3
# check that some additional fields are strings # check that some additional fields are strings
if debug: if debug:
print('INBOX: checking fields 1') print('INBOX: checking fields 1')