forked from fedi/mastodon
bcf85b5208
* Dereference object URIs in Create and Update messages Fixes #14353 Signed-off-by: Thibaut Girka <thib@sitedethib.com> * Refactor, and perform origin check *before* attempting to fetch object Co-authored-by: Fire Demon <firedemon@creature.cafe>
33 lines
893 B
Ruby
33 lines
893 B
Ruby
# frozen_string_literal: true
|
|
|
|
class ActivityPub::Activity::Update < ActivityPub::Activity
|
|
SUPPORTED_TYPES = %w(Application Group Organization Person Service).freeze
|
|
|
|
def perform
|
|
dereference_object!
|
|
|
|
if equals_or_includes_any?(@object['type'], SUPPORTED_TYPES)
|
|
update_account
|
|
elsif equals_or_includes_any?(@object['type'], %w(Question))
|
|
update_poll
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def update_account
|
|
return if @account.uri != object_uri
|
|
|
|
ActivityPub::ProcessAccountService.new.call(@account.username, @account.domain, @object, signed_with_known_key: true)
|
|
end
|
|
|
|
def update_poll
|
|
return reject_payload! if invalid_origin?(@object['id'])
|
|
|
|
status = Status.find_by(uri: object_uri, account_id: @account.id)
|
|
return if status.nil? || status.preloadable_poll.nil?
|
|
|
|
ActivityPub::ProcessPollService.new.call(status.preloadable_poll, @object)
|
|
end
|
|
end
|