GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Alex Gleason (alex@gleasonator.com)'s status on Tuesday, 15-Aug-2023 06:55:14 JSTAlex GleasonAlex Gleason
    I just patched the Mostr bridge, because apparently Deno's fetch implementation is vulnerable to fetching "file://" URIs. Thankfully I was parsing the response data before returning anything, but TIL the Deno devs implemented this as a "feature" on purpose. 🤦♂️ Nobody is safe from Rust.

    https://gitlab.com/soapbox-pub/mostr/-/merge_requests/66
    In conversationabout a year ago from gleasonator.compermalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: gitlab.com
      Add safeFetch implementation to prevent pwning the server with file URIs (!66) · Merge requests · Soapbox / Mostr · GitLab
      Apparently Deno has an unsafe fetch implementation. Mildly infuriating. More here: https://github.com/denoland/deno/issues/11925#issuecomment-1678084346
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.