]> cat aescling's git repositories - mastodon.git/commit
Change signature verification to ignore signatures with invalid host (#13033)
authorEugen Rochko <eugen@zeonfederated.com>
Mon, 3 Feb 2020 16:48:23 +0000 (17:48 +0100)
committerGitHub <noreply@github.com>
Mon, 3 Feb 2020 16:48:23 +0000 (17:48 +0100)
commit5265df0a8a9d66a88cbb45bff5e9316a357e934a
treee84a3922220952d6f995bbc287b8ab75ef651497
parent62f0b306170ef12c925f3e72a4e2c5f94d1ae06f
Change signature verification to ignore signatures with invalid host (#13033)

Instead of returning a signature verification error, pretend there
was no signature (i.e., this does not allow access to resources that
need a valid signature), so public resources can still be fetched

Fix #13011
app/controllers/concerns/signature_verification.rb
spec/controllers/concerns/signature_verification_spec.rb