enforce HTTPS for all federation

2025-05-25 00:04:27 -04:00 · 2025-05-25 00:04:27 -04:00 · 7f5e43530f
commit 7f5e43530f
parent b6a71d2362
5 changed files with 46 additions and 3 deletions
--- a/packages/backend/src/core/HttpRequestService.ts
+++ b/packages/backend/src/core/HttpRequestService.ts
@ -236,6 +236,8 @@ export class HttpRequestService {

 	@bindThis
 	public async getActivityJson(url: string, isLocalAddressAllowed = false): Promise<IObjectWithId> {
+		this.apUtilityService.assertApUrl(url);
+
 		const res = await this.send(url, {
 			method: 'GET',
 			headers: {