limepotato/jormungandr-bite
1
0
Fork 0
mirror of https://iceshrimp.dev/limepotato/jormungandr-bite.git synced 2024-11-25 03:17:38 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

[backend] Improve JSON-LD context size limiter

Browse source
This commit is contained in:
Laura Hausmann 2024-07-28 17:00:00 +02:00
parent d9d6dc1b60
commit 9a8b7efcd6
No known key found for this signature in database
GPG key ID: D044E84C5BE01605
1 changed files with 7 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
packages/backend/src/remote/activitypub/misc/ld-signature.ts
View file

@ -122,11 +122,12 @@ export class LdSignature {
} }
private async fetchDocument(url: string) { private async fetchDocument(url: string) {
const json = await fetch(url, { const ctrl = new AbortController();
return await fetch(url, {
headers: { headers: {
Accept: "application/ld+json, application/json", Accept: "application/ld+json, application/json",
}, },
size: 1024 * 1024, // 1MiB signal: ctrl.signal,
// TODO // TODO
//timeout: this.loderTimeout, //timeout: this.loderTimeout,
agent: (u) => (u.protocol === "http:" ? httpAgent : httpsAgent), agent: (u) => (u.protocol === "http:" ? httpAgent : httpsAgent),
@ -134,11 +135,12 @@ export class LdSignature {
if (!res.ok) { if (!res.ok) {
throw new Error(`${res.status} ${res.statusText}`); throw new Error(`${res.status} ${res.statusText}`);
} else { } else {
if (res.size < 1024 * 1024) // 1MiB
return res.json(); return res.json();
ctrl.abort();
throw new Error('Size exceeded 1MiB');
} }
}); });
return json;
} }
public sha256(data: string): string { public sha256(data: string): string {