Oneric 70fe99d196 Prevent key-actor mapping poisoning and key take overs ... Previously there were mainly two attack vectors: - for raw keys the owner <-> key mapping wasn't verified at all - keys were retrieved with refetching allowed and only the top-level ID was sanitised while usually keys are but a subobject This reintroduces public key checks in the user actor, previously removed in 9728e2f8f7 but now adapted to account for the new mapping mechanism.		2025-02-14 22:10:25 +01:00
..
activity_pub	Remove deps from Streaming/Persisting behaviors	2021-06-01 13:55:07 -05:00
mrf	mrf/object_age: fix handling of non-public objects	2024-11-17 00:44:51 +01:00
object_validator	Bump Copyright to 2021	2021-01-13 07:49:50 +01:00
object_validators	Prevent key-actor mapping poisoning and key take overs	2025-02-14 22:10:25 +01:00
side_effects	Refactor ES on top of search behaviour	2022-06-30 16:28:31 +01:00
views	standardise local key id generation	2024-10-30 12:44:01 +00:00
activity_pub.ex	Don't return garbage on failed collection fetches	2025-02-14 18:49:51 +01:00
activity_pub_controller.ex	Fix http signature plug tests	2024-10-26 05:05:48 +01:00
builder.ex	Migrate to phoenix 1.7 (#626)	2023-08-15 10:22:18 +00:00
internal_fetch_actor.ex	Bump Copyright to 2021	2021-01-13 07:49:50 +01:00
mrf.ex	cosmetic: fix elixir 1.17 compiler warnings in main application	2024-06-19 01:49:59 +02:00
object_validator.ex	federation/incoming: improve link_resolve retry decision	2025-01-07 20:27:28 +01:00
pipeline.ex	Refactor ES on top of search behaviour	2022-06-30 16:28:31 +01:00
publisher.ex	Purge obsolete ap_enabled indicator	2025-01-07 20:27:26 +01:00
relay.ex	Bump Copyright to 2021	2021-01-13 07:49:50 +01:00
side_effects.ex	RichMedia refactor	2024-06-09 17:33:48 +01:00
transmogrifier.ex	cosmetic/object: drop is_ prefix from is_tombstone_object?	2025-02-14 22:10:25 +01:00
utils.ex	Migrate to phoenix 1.7 (#626)	2023-08-15 10:22:18 +00:00
visibility.ex	local-only-fixed (#138)	2022-08-02 14:46:46 +00:00