From 849bef5a74c788de29074bfe449a3a27e13e8a74 Mon Sep 17 00:00:00 2001
From: bashrc <bob@libreserver.org>
Date: Mon, 13 Apr 2026 10:33:26 +0100
Subject: [PATCH] Validate nickname when getting actor json

---
 person.py | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/person.py b/person.py
index ec85a5194..4310fe7fb 100644
--- a/person.py
+++ b/person.py
@@ -1879,8 +1879,10 @@ def get_actor_json(host_domain: str, handle: str, http: bool, gnunet: bool,
     """
     if debug:
         print('get_actor_json for ' + handle)
-    original_actor = handle
+    original_actor: str = handle
     group_account = False
+    nickname: str = ''
+    domain: str = ''
 
     # try to determine the users path
     detected_users_path = _detect_users_path(handle)
@@ -1942,6 +1944,13 @@ def get_actor_json(host_domain: str, handle: str, http: bool, gnunet: bool,
         domain = handle.split('@')[1]
         domain = remove_eol(domain)
 
+    if not nickname or not domain:
+        return None, None
+
+    if not valid_nickname(domain, nickname):
+        print('WARN: get_actor_json invalid nickname ' + nickname)
+        return None, None
+
     cached_webfingers = {}
     proxy_type = None
     if domain.endswith('.onion'):