forked from YokaiRick/akkoma
activitypub: fetch_object_from_id(): prefer actor
over attributedTo
to avoid spoofing
This commit is contained in:
parent
9c8adfb6ef
commit
603fccf175
1 changed files with 1 additions and 1 deletions
|
@ -747,7 +747,7 @@ def fetch_object_from_id(id) do
|
|||
"type" => "Create",
|
||||
"to" => data["to"],
|
||||
"cc" => data["cc"],
|
||||
"actor" => data["attributedTo"],
|
||||
"actor" => data["actor"] || data["attributedTo"],
|
||||
"object" => data
|
||||
},
|
||||
:ok <- Transmogrifier.contain_origin(id, params),
|
||||
|
|
Loading…
Reference in a new issue