Only allow http(s) scheme for urls (ref #3505) (#3508)
With this change only http(s) schemes are allowed for post.url field. This is checked for incoming api and federation requests. Existing posts in database which are sent to clients are not checked. Neither does it check urls in markdown.
Showing
- crates/api_crud/src/post/create.rs 2 additions, 1 deletioncrates/api_crud/src/post/create.rs
- crates/api_crud/src/post/update.rs 2 additions, 1 deletioncrates/api_crud/src/post/update.rs
- crates/apub/src/objects/post.rs 2 additions, 0 deletionscrates/apub/src/objects/post.rs
- crates/utils/src/utils/validation.rs 19 additions, 0 deletionscrates/utils/src/utils/validation.rs
Loading
Please register or sign in to comment