Defend from kbin.social messages not having a content-type header.

This commit is contained in:
default 2023-06-19 17:39:53 +02:00
parent 42803e2116
commit 96b8791754

View File

@ -90,6 +90,9 @@ int activitypub_request(snac *snac, const char *url, xs_dict **data)
/* ensure it's ActivityPub data */ /* ensure it's ActivityPub data */
ctype = xs_dict_get(response, "content-type"); ctype = xs_dict_get(response, "content-type");
if (xs_is_null(ctype))
status = 400;
else
if (xs_str_in(ctype, "application/activity+json") != -1 || if (xs_str_in(ctype, "application/activity+json") != -1 ||
xs_str_in(ctype, "application/ld+json") != -1) xs_str_in(ctype, "application/ld+json") != -1)
*data = xs_json_loads(payload); *data = xs_json_loads(payload);