diff options
| author | rinpatch <rinpatch@sdf.org> | 2020-11-03 13:59:18 +0000 |
|---|---|---|
| committer | rinpatch <rinpatch@sdf.org> | 2020-11-05 16:32:54 +0300 |
| commit | 5116859f0e53a5b79a01f764fa3baf4c2110df1b (patch) | |
| tree | a632077c2e8a72decbbcad50b103766fba666218 /test/fixtures/spoofed-object.json | |
| parent | 4d693b5e54b46c8863c463503d270a0d61d79c37 (diff) | |
| download | pleroma-5116859f0e53a5b79a01f764fa3baf4c2110df1b.tar.gz pleroma-5116859f0e53a5b79a01f764fa3baf4c2110df1b.zip | |
Merge branch 'fix/object-attachment-spoof' into 'develop'
Fix object spoofing vulnerability in attachments
See merge request pleroma/secteam/pleroma!18
Diffstat (limited to 'test/fixtures/spoofed-object.json')
| -rw-r--r-- | test/fixtures/spoofed-object.json | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/test/fixtures/spoofed-object.json b/test/fixtures/spoofed-object.json new file mode 100644 index 000000000..91e34307d --- /dev/null +++ b/test/fixtures/spoofed-object.json @@ -0,0 +1,26 @@ +{ + "@context": [ + "https://www.w3.org/ns/activitystreams", + "https://patch.cx/schemas/litepub-0.1.jsonld", + { + "@language": "und" + } + ], + "actor": "https://patch.cx/users/rin", + "attachment": [], + "attributedTo": "https://patch.cx/users/rin", + "cc": [ + "https://patch.cx/users/rin/followers" + ], + "content": "Oracle Corporation (NYSE: ORCL) today announced that it has signed a definitive merger agreement to acquire Pleroma AG (FRA: PLA), for $26.50 per share (approximately $10.3 billion). The transaction has been approved by the boards of directors of both companies and should close by early January.", + "context": "https://patch.cx/contexts/spoof", + "id": "https://patch.cx/objects/spoof", + "published": "2020-10-23T18:02:06.038856Z", + "sensitive": false, + "summary": "Oracle buys Pleroma", + "tag": [], + "to": [ + "https://www.w3.org/ns/activitystreams#Public" + ], + "type": "Note" +} |