MirrorHub/forgejo
0
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2024-12-27 10:23:56 +01:00
Code Issues Projects Releases Packages Wiki Activity

Update ToDo

Browse source
This commit is contained in:
erik 2023-12-07 13:53:37 +01:00 committed by Michael Jerger
parent afe659f9f4
commit 22d71e6b30
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
routers/api/v1/activitypub/repository.go
View file

@ -262,6 +262,8 @@ func RepositoryInbox(ctx *context.APIContext) {
// Check if user already exists // Check if user already exists
// TODO: If the usesrs-id points to our current host, we've to use an alterantive search ... // TODO: If the usesrs-id points to our current host, we've to use an alterantive search ...
// > We might need to discuss this further with the community, because when we execute this bit of code here, the federated api has been called.
// > Thus the searching for non-federated users could facilitate spoofing of already existing user-ids for some (malicious) purposes.
users, err := searchUsersByPerson(remoteStargazer) users, err := searchUsersByPerson(remoteStargazer)
if err != nil { if err != nil {
panic(fmt.Errorf("searching for user failed: %v", err)) panic(fmt.Errorf("searching for user failed: %v", err))