kawaiipunk/laipower
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

updated plugin ActivityPub version 9.1.0

Browse Source
This commit is contained in:
KawaiiPunk
2026-07-28 15:03:10 +00:00
committed by Gitium
parent bf428f0e45
commit ff806e1811
217 changed files with 6098 additions and 3025 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
wp-content/plugins/activitypub/includes/handler/class-reject.php
View File

@ -56,14 +56,24 @@ class Reject {
* @param int|int[] $user_ids The user ID(s).
*/
private static function reject_follow( $reject, $user_ids ) {
$actor_uri = $reject['object']['actor'] ?? '';
$actor_post = Remote_Actors::get_by_uri( object_to_uri( $actor_uri ) );
/*
* For a Follow Reject, the sender must be the actor that was followed.
* Without this, a signed Reject from one actor could cancel a Follow that
* targeted another actor by referencing that pending Follow's outbox GUID.
*/
$reject_actor = object_to_uri( $reject['actor'] ?? '' );
$followed_actor = object_to_uri( $reject['object']['object'] ?? '' );
if ( ! $reject_actor || ! $followed_actor || $reject_actor !== $followed_actor ) {
return;
}
$actor_post = Remote_Actors::get_by_uri( $followed_actor );
if ( \is_wp_error( $actor_post ) ) {
return;
}
$user_id = is_array( $user_ids ) ? reset( $user_ids ) : $user_ids;
$user_id = \is_array( $user_ids ) ? \reset( $user_ids ) : $user_ids;
$result = Following::reject( $actor_post, $user_id );
$success = ! \is_wp_error( $result );
@ -102,6 +112,14 @@ class Reject {
return false;
}
if ( ! \is_array( $activity['object'] ) ) {
return false;
}
if ( ! isset( $activity['object']['id'], $activity['object']['type'], $activity['object']['actor'], $activity['object']['object'] ) ) {
return false;
}
return $valid;
}
}