Use JSON.parse in AP inboxes (#38238)

This commit is contained in:
Matt Jankowski authored and GitHub committed 2026-03-16 16:58:13 +00:00
1 parent 3832030711
commit 16c41e035b
2 files changed
+20 -2

No files matched your search

@@ -26,9 +26,9 @@ class ActivityPub::InboxesController < ActivityPub::BaseController
end
def unknown_affected_account?
json = Oj.load(body, mode: :strict)
json = JSON.parse(body)
json.is_a?(Hash) && %w(Delete Update).include?(json['type']) && json['actor'].present? && json['actor'] == value_or_id(json['object']) && !Account.exists?(uri: json['actor'])
rescue Oj::ParseError
rescue JSON::ParserError
false
end