From b9acd64543240c45eee54e65147097c32041debb Mon Sep 17 00:00:00 2001 From: Daniel Supernault Date: Thu, 29 Aug 2019 21:04:10 -0600 Subject: [PATCH] Update FederationController --- app/Http/Controllers/FederationController.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/app/Http/Controllers/FederationController.php b/app/Http/Controllers/FederationController.php index 6eba09c74..e6edb11c6 100644 --- a/app/Http/Controllers/FederationController.php +++ b/app/Http/Controllers/FederationController.php @@ -228,6 +228,9 @@ class FederationController extends Controller $id = Helpers::validateUrl($bodyDecoded['id']); $keyDomain = parse_url($keyId, PHP_URL_HOST); $idDomain = parse_url($id, PHP_URL_HOST); + if($keyDomain == config('pixelfed.domain.app') || $idDomain == config('pixelfed.domain.app')) { + return false; + } if(isset($bodyDecoded['object']) && is_array($bodyDecoded['object']) && isset($bodyDecoded['object']['attributedTo']) @@ -248,7 +251,7 @@ class FederationController extends Controller } $pkey = openssl_pkey_get_public($actor->public_key); $inboxPath = "/users/{$profile->username}/inbox"; - list($verified, $headers) = HTTPSignature::verify($pkey, $signatureData, $request->headers->all(), $inboxPath, $body); + list($verified, $headers) = HttpSignature::verify($pkey, $signatureData, $request->headers->all(), $inboxPath, $body); if($verified == 1) { return true; } else {