repos/website
1
Fork 0
Code Issues 1 Pull requests 26 Activity

Use urljoin to safely join activitypub URL

Browse source
This commit is contained in:
Jake Howard 2024-02-17 21:21:37 +00:00
parent 23ce49ca8f
commit 1934b36ec1
Signed by: jake
GPG key ID: 57AFB45680EDD477
1 changed files with 8 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
website/well_known/views.py
View file

@ -1,4 +1,5 @@
from datetime import timedelta
from urllib.parse import urljoin
from django.conf import settings
from django.http.request import HttpRequest
@ -56,10 +57,13 @@ def activitypub_proxy(request: HttpRequest) -> HttpResponse:
if not settings.ACTIVITYPUB_HOST:
raise Http404
activitypub_url = urljoin(
"https://" + settings.ACTIVITYPUB_HOST,
request.path,
allow_fragments=True,
)
try:
return proxy_view(
request,
f"https://{settings.ACTIVITYPUB_HOST}{request.path}",
)
return proxy_view(request, activitypub_url)
except RequestException:
return HttpResponse(status_code=502)