Allow JSON-LD documents with multiple profiles

glitch-soc/security/f425a1e6378bd4fbed568100f0c26acfc6db8fd9
Claire 2024-02-09 18:24:26 +01:00
parent 622a87a601
commit b9d2ea1490
1 changed files with 5 additions and 1 deletions

View File

@ -183,7 +183,11 @@ module JsonLdHelper
# When the mime type is `application/ld+json`, we need to check the profile,
# but `http.rb` does not parse it for us.
response.mime_type == 'application/ld+json' && response.headers[HTTP::Headers::CONTENT_TYPE]&.split(';')&.map(&:strip)&.include?('profile="https://www.w3.org/ns/activitystreams"')
return false unless response.mime_type == 'application/ld+json'
response.headers[HTTP::Headers::CONTENT_TYPE]&.split(';')&.map(&:strip)&.any? do |str|
str.start_with?('profile="') && str[9...-1].split.include?('https://www.w3.org/ns/activitystreams')
end
end
def body_to_json(body, compare_id: nil)