X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;ds=inline;f=server%2Fhelpers%2Fcustom-validators%2Factivitypub%2Fmisc.ts;h=ff15f115f8d81145049083f7179f9b295ab3f243;hb=9452d4fd3321148fb80b64a67bd9983fee6c208e;hp=a94c36b514328d5989aaf766df9a197822d612c8;hpb=e34c85e527100c0b5c44567bd951e95be41b8d7e;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server/helpers/custom-validators/activitypub/misc.ts b/server/helpers/custom-validators/activitypub/misc.ts index a94c36b51..ff15f115f 100644 --- a/server/helpers/custom-validators/activitypub/misc.ts +++ b/server/helpers/custom-validators/activitypub/misc.ts @@ -1,9 +1,9 @@ -import * as validator from 'validator' -import { exists } from '../misc' -import { isTestInstance } from '../../core-utils' +import validator from 'validator' import { CONSTRAINTS_FIELDS } from '../../../initializers/constants' +import { isTestOrDevInstance } from '../../core-utils' +import { exists } from '../misc' -function isActivityPubUrlValid (url: string) { +function isUrlValid (url: string) { const isURLOptions = { require_host: true, require_tld: true, @@ -13,23 +13,63 @@ function isActivityPubUrlValid (url: string) { } // We validate 'localhost', so we don't have the top level domain - if (isTestInstance()) { + if (isTestOrDevInstance()) { isURLOptions.require_tld = false } - return exists(url) && validator.isURL(url, isURLOptions) && validator.isLength(url, CONSTRAINTS_FIELDS.ACCOUNTS.URL) + return exists(url) && validator.isURL('' + url, isURLOptions) +} + +function isActivityPubUrlValid (url: string) { + return isUrlValid(url) && validator.isLength('' + url, CONSTRAINTS_FIELDS.ACTORS.URL) } function isBaseActivityValid (activity: any, type: string) { - return Array.isArray(activity['@context']) && - activity.type === type && - validator.isURL(activity.id) && - validator.isURL(activity.actor) && - Array.isArray(activity.to) && - activity.to.every(t => validator.isURL(t)) + return activity.type === type && + isActivityPubUrlValid(activity.id) && + isObjectValid(activity.actor) && + isUrlCollectionValid(activity.to) && + isUrlCollectionValid(activity.cc) +} + +function isUrlCollectionValid (collection: any) { + return collection === undefined || + (Array.isArray(collection) && collection.every(t => isActivityPubUrlValid(t))) +} + +function isObjectValid (object: any) { + return exists(object) && + ( + isActivityPubUrlValid(object) || isActivityPubUrlValid(object.id) + ) +} + +function setValidAttributedTo (obj: any) { + if (Array.isArray(obj.attributedTo) === false) { + obj.attributedTo = [] + return true + } + + obj.attributedTo = obj.attributedTo.filter(a => { + return (a.type === 'Group' || a.type === 'Person') && isActivityPubUrlValid(a.id) + }) + + return true +} + +function isActivityPubVideoDurationValid (value: string) { + // https://www.w3.org/TR/activitystreams-vocabulary/#dfn-duration + return exists(value) && + typeof value === 'string' && + value.startsWith('PT') && + value.endsWith('S') } export { + isUrlValid, isActivityPubUrlValid, - isBaseActivityValid + isBaseActivityValid, + setValidAttributedTo, + isObjectValid, + isActivityPubVideoDurationValid }