updated plugin ActivityPub version 5.8.0

wp-content/plugins/activitypub/includes/handler/class-create.php

@@ -9,6 +9,8 @@ namespace Activitypub\Handler;
 
 use Activitypub\Collection\Interactions;
 
+use function Activitypub\is_self_ping;
+use function Activitypub\is_activity_reply;
 use function Activitypub\is_activity_public;
 use function Activitypub\object_id_to_comment;
 
@@ -44,8 +46,10 @@ class Create {
 	 */
 	public static function handle_create( $activity, $user_id, $activity_object = null ) {
 		// Check if Activity is public or not.
-		if ( ! is_activity_public( $activity ) ) {
-			// @todo maybe send email.
+		if (
+			! is_activity_public( $activity ) ||
+			! is_activity_reply( $activity )
+		) {
 			return;
 		}
 
@@ -58,13 +62,16 @@ class Create {
 			 *
 			 * @param array                          $activity        The activity-object.
 			 * @param int                            $user_id         The id of the local blog-user.
-			 * @param \WP_Comment|\WP_Error          $check_dupe      The comment object or WP_Error.
 			 * @param \Activitypub\Activity\Activity $activity_object The activity object.
 			 */
 			\do_action( 'activitypub_inbox_update', $activity, $user_id, $activity_object );
 			return;
 		}
 
+		if ( is_self_ping( $activity['object']['id'] ) ) {
+			return;
+		}
+
 		$state    = Interactions::add_comment( $activity );
 		$reaction = null;
 
@@ -95,6 +102,10 @@ class Create {
 	public static function validate_object( $valid, $param, $request ) {
 		$json_params = $request->get_json_params();
 
+		if ( empty( $json_params['type'] ) ) {
+			return false;
+		}
+
 		if (
 			'Create' !== $json_params['type'] ||
 			is_wp_error( $request )
@@ -102,10 +113,14 @@ class Create {
 			return $valid;
 		}
 
-		$object   = $json_params['object'];
+		$object = $json_params['object'];
+
+		if ( ! is_array( $object ) ) {
+			return false;
+		}
+
 		$required = array(
 			'id',
-			'inReplyTo',
 			'content',
 		);