mj-saunders
/
epicyon
forked from indymedia/epicyon
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

reject giant messages

master
Bob Mottram 2019-06-28 22:06:05 +01:00
parent 7924f4184b
commit e01926bd1c
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
daemon.py
View File

@ -18,6 +18,7 @@ from webfinger import webfingerLookup
from person import personLookup from person import personLookup
from person import personKeyLookup from person import personKeyLookup
import os import os
import sys
# domain name of this server # domain name of this server
thisDomain='' thisDomain=''
@ -25,6 +26,9 @@ thisDomain=''
# List of domains to federate with # List of domains to federate with
federationList=[] federationList=[]
# Avoid giant messages
maxMessageLength=5000
def readFollowList(filename: str): def readFollowList(filename: str):
"""Returns a list of ActivityPub addresses to follow """Returns a list of ActivityPub addresses to follow
""" """
@ -154,7 +158,11 @@ class PubServer(BaseHTTPRequestHandler):
# read the message and convert it into a python dictionary # read the message and convert it into a python dictionary
length = int(self.headers.getheader('content-length')) length = int(self.headers.getheader('content-length'))
message = json.loads(self.rfile.read(length)) if length>maxMessageLength:
self.send_response(400)
self.end_headers()
return
message = json.loads(self.rfile.read(length))
if not self._permittedMessage(message): if not self._permittedMessage(message):
self._404() self._404()