bida/bastodon
6
0
Fork 0
Code Issues 7 Pull requests Releases Wiki Activity

Ensure request.body isn't emptied out before signature verification (#10432)

Browse source 
Fixes #10429
This commit is contained in:
ThibG 2019-03-31 17:27:24 +02:00 committed by Eugen Rochko
parent 59cce07601
commit 68c797bece
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
app/controllers/activitypub/inboxes_controller.rb
View file

@ -32,7 +32,10 @@ class ActivityPub::InboxesController < Api::BaseController
end end
def body def body
@body ||= request.body.read.force_encoding('UTF-8') return @body if defined?(@body)
@body = request.body.read.force_encoding('UTF-8')
request.body.rewind if request.body.respond_to?(:rewind)
@body
end end
def upgrade_account def upgrade_account