Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix unbounded recursion in account discovery #22025

Merged
merged 3 commits into from
Dec 6, 2022

Conversation

ClearlyClaire
Copy link
Contributor

No description provided.

@ClearlyClaire ClearlyClaire added the security Security issues and fixes, vulnerabilities label Dec 4, 2022
Copy link

@Deauthorized Deauthorized left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Regarding the lint errors for parameter lists being longer than 5 parameters, maybe this could be applied towards it?

https://codereview.stackexchange.com/questions/200298/parameter-list-too-long-in-initialize-method

@ClearlyClaire
Copy link
Contributor Author

Regarding the lint errors for parameter lists being longer than 5 parameters, maybe this could be applied towards it?

https://codereview.stackexchange.com/questions/200298/parameter-list-too-long-in-initialize-method

I honestly would prefer if we switched CountKeywordArgs to false, but I think it's kind of out of scope for this PR.

@ineffyble ineffyble linked an issue Dec 5, 2022 that may be closed by this pull request
@simcop2387
Copy link

If it helps I've manually merged this to my own instance on www dot omeowgle dot com and can help provide logs or anything if additional testing is needed (it's a small single user instance for my cat).

@Gargron Gargron merged commit c8849d6 into mastodon:main Dec 6, 2022
maa123 pushed a commit to maa123/mastodon that referenced this pull request Dec 7, 2022
* Fix trying to fetch posts from other users when fetching featured posts

* Rate-limit discovery of new subdomains

* Put a limit on recursively discovering new accounts
perillamint pushed a commit to CyberSiliconForest/mastodon that referenced this pull request Dec 10, 2022
* Fix trying to fetch posts from other users when fetching featured posts

* Rate-limit discovery of new subdomains

* Put a limit on recursively discovering new accounts
perillamint pushed a commit to kurry-social/mastodon that referenced this pull request Dec 10, 2022
* Fix trying to fetch posts from other users when fetching featured posts

* Rate-limit discovery of new subdomains

* Put a limit on recursively discovering new accounts
perillamint referenced this pull request in uri-life/mastodon Dec 10, 2022
* Fix trying to fetch posts from other users when fetching featured posts

* Rate-limit discovery of new subdomains

* Put a limit on recursively discovering new accounts
PeterCxy pushed a commit to PeterCxy/mastodon that referenced this pull request Dec 10, 2022
* Fix trying to fetch posts from other users when fetching featured posts

* Rate-limit discovery of new subdomains

* Put a limit on recursively discovering new accounts
nametoolong pushed a commit to nametoolong/nuage that referenced this pull request Jan 12, 2023
* Fix trying to fetch posts from other users when fetching featured posts

* Rate-limit discovery of new subdomains

* Put a limit on recursively discovering new accounts
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security Security issues and fixes, vulnerabilities
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Any idea to stop activitypub-troll.cf or likewise attacks?
7 participants