Mirrors/activitypub-federation-rust
2
0
Fork 0
mirror of https://github.com/LemmyNet/activitypub-federation-rust synced 2024-11-12 23:17:17 +00:00
Code Issues Projects Releases Packages Wiki Activity

Make response content-type check case insensitive (#111)

Browse source 
* Make response content-type check case insensitive

For wordpress compat

* cleaner

* clippy

* fmt

* fmt
This commit is contained in:
Nutomic 2024-05-06 11:09:23 +02:00 committed by GitHub
parent 24afad7abc
commit cf1f84993b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 14 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
src/fetch/mod.rs
View file

@ -53,19 +53,21 @@ pub async fn fetch_object_http<T: Clone, Kind: DeserializeOwned>(
url: &Url, url: &Url,
data: &Data<T>, data: &Data<T>,
) -> Result<FetchObjectResponse<Kind>, Error> { ) -> Result<FetchObjectResponse<Kind>, Error> {
static CONTENT_TYPE: HeaderValue = HeaderValue::from_static(FEDERATION_CONTENT_TYPE); static FETCH_CONTENT_TYPE: HeaderValue = HeaderValue::from_static(FEDERATION_CONTENT_TYPE);
static ALT_CONTENT_TYPE: HeaderValue = HeaderValue::from_static( const VALID_RESPONSE_CONTENT_TYPES: [&str; 3] = [
r#"application/ld+json; profile="https://www.w3.org/ns/activitystreams""#, FEDERATION_CONTENT_TYPE, // lemmy
); r#"application/ld+json; profile="https://www.w3.org/ns/activitystreams""#, // activitypub standard
static ALT_CONTENT_TYPE_MASTODON: HeaderValue = r#"application/activity+json; charset=utf-8"#, // mastodon
HeaderValue::from_static(r#"application/activity+json; charset=utf-8"#); ];
let res = fetch_object_http_with_accept(url, data, &CONTENT_TYPE).await?; let res = fetch_object_http_with_accept(url, data, &FETCH_CONTENT_TYPE).await?;
// Ensure correct content-type to prevent vulnerabilities. // Ensure correct content-type to prevent vulnerabilities, with case insensitive comparison.
if res.content_type.as_ref() != Some(&CONTENT_TYPE) let content_type = res
&& res.content_type.as_ref() != Some(&ALT_CONTENT_TYPE) .content_type
&& res.content_type.as_ref() != Some(&ALT_CONTENT_TYPE_MASTODON) .as_ref()
{ .and_then(|c| c.to_str().ok())
.ok_or(Error::FetchInvalidContentType(res.url.clone()))?;
if !VALID_RESPONSE_CONTENT_TYPES.contains(&content_type) {
return Err(Error::FetchInvalidContentType(res.url)); return Err(Error::FetchInvalidContentType(res.url));
} }