Browse Source

Fix uncaught domain normalization error in remote follow (#11703)

master^2
Eugen Rochko 4 years ago
committed by GitHub
parent
commit
b54b725d6b
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
6 changed files with 18 additions and 10 deletions
  1. +1
    -1
      app/controllers/remote_follow_controller.rb
  2. +1
    -1
      app/controllers/remote_interaction_controller.rb
  3. +4
    -2
      app/models/remote_follow.rb
  4. +10
    -2
      app/validators/domain_validator.rb
  5. +1
    -3
      spec/controllers/remote_follow_controller_spec.rb
  6. +1
    -1
      spec/models/remote_follow_spec.rb

+ 1
- 1
app/controllers/remote_follow_controller.rb View File

@@ -29,7 +29,7 @@ class RemoteFollowController < ApplicationController
end

def session_params
{ acct: session[:remote_follow] }
{ acct: session[:remote_follow] || current_account&.username }
end

def set_body_classes


+ 1
- 1
app/controllers/remote_interaction_controller.rb View File

@@ -32,7 +32,7 @@ class RemoteInteractionController < ApplicationController
end

def session_params
{ acct: session[:remote_follow] }
{ acct: session[:remote_follow] || current_account&.username }
end

def set_status


+ 4
- 2
app/models/remote_follow.rb View File

@@ -6,7 +6,7 @@ class RemoteFollow

attr_accessor :acct, :addressable_template

validates :acct, presence: true
validates :acct, presence: true, domain: { acct: true }

def initialize(attrs = {})
@acct = normalize_acct(attrs[:acct])
@@ -21,7 +21,7 @@ class RemoteFollow
end

def subscribe_address_for(account)
addressable_template.expand(uri: account.local_username_and_domain).to_s
addressable_template.expand(uri: ActivityPub::TagManager.instance.uri_for(account)).to_s
end

def interact_address_for(status)
@@ -44,6 +44,8 @@ class RemoteFollow
end

[username, domain].compact.join('@')
rescue Addressable::URI::InvalidURIError
value
end

def fetch_template!


+ 10
- 2
app/validators/domain_validator.rb View File

@@ -4,14 +4,22 @@ class DomainValidator < ActiveModel::EachValidator
def validate_each(record, attribute, value)
return if value.blank?

record.errors.add(attribute, I18n.t('domain_validator.invalid_domain')) unless compliant?(value)
domain = begin
if options[:acct]
value.split('@').last
else
value
end
end

record.errors.add(attribute, I18n.t('domain_validator.invalid_domain')) unless compliant?(domain)
end

private

def compliant?(value)
Addressable::URI.new.tap { |uri| uri.host = value }
rescue Addressable::URI::InvalidURIError
rescue Addressable::URI::InvalidURIError, IDN::Idna::IdnaError
false
end
end

+ 1
- 3
spec/controllers/remote_follow_controller_spec.rb View File

@@ -66,9 +66,7 @@ describe RemoteFollowController do
end

it 'redirects to the remote location' do
address = "http://example.com/follow_me?acct=test_user%40#{Rails.configuration.x.local_domain}"

expect(response).to redirect_to(address)
expect(response).to redirect_to("http://example.com/follow_me?acct=https%3A%2F%2F#{Rails.configuration.x.local_domain}%2Fusers%2Ftest_user")
end
end
end


+ 1
- 1
spec/models/remote_follow_spec.rb View File

@@ -61,7 +61,7 @@ RSpec.describe RemoteFollow do
subject { remote_follow.subscribe_address_for(account) }

it 'returns subscribe address' do
is_expected.to eq 'https://quitter.no/main/ostatussub?profile=alice%40cb6e6126.ngrok.io'
is_expected.to eq 'https://quitter.no/main/ostatussub?profile=https%3A%2F%2Fcb6e6126.ngrok.io%2Fusers%2Falice'
end
end
end

Loading…
Cancel
Save