diff options
| author | Eugen Rochko <eugen@zeonfederated.com> | 2017-04-27 17:06:47 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-04-27 17:06:47 +0200 |
| commit | 2af4f3c4e22ab9a28a7fca49bee0ee2ed6256f27 (patch) | |
| tree | 073f68695a0da1ee7dcf2f909a449b60286ad3f4 /app/views/user_mailer/confirmation_instructions.id.html.erb | |
| parent | b8e7eee8372f927a5a3b51e95db3707d34c4ac4b (diff) | |
Improve shared status verification (#2525)
* Instead of parsing shared status contents verbatim, make roundtrip to purported original URL. Confirm that the "original" URL is from the same domain as the author it claims to be from. * Fix obvious typo, add comment * Use URI look-up first * Add test, update Goldfinger dependency to make less useless HTTP requests per Webfinger lookup
Diffstat (limited to 'app/views/user_mailer/confirmation_instructions.id.html.erb')
0 files changed, 0 insertions, 0 deletions