summaryrefslogtreecommitdiff
path: root/changelog.d/object-fetcher-content-type.security
blob: 2ef4aefe7ade5cf1db7fedad57eb309844dc7bc3 (plain)
1
Validate Content-Type headers when fetching remote ActivityPub objects to prevent spoofing attacks.