Ensure we don't receive things from local actors

diff --git a/server/middlewares/validators/activitypub/activity.ts b/server/middlewares/validators/activitypub/activity.ts
index 255d8eb17933c9e798ef75036c0564c5a4c8e823..e78ef07ef95a733fd9efaf41a6a7926a9c1305d3 100644 (file)
--- a/server/middlewares/validators/activitypub/activity.ts
+++ b/server/middlewares/validators/activitypub/activity.ts
@@ -15,7 +15,7 @@ async function activityPubValidator (req: express.Request, res: express.Response
 
   const serverActor = await getServerActor()
   const remoteActor = res.locals.signature.actor
-  if (serverActor.id === remoteActor.id) {
+  if (serverActor.id === remoteActor.id || remoteActor.serverId === null) {
     logger.error('Receiving request in INBOX by ourselves!', req.body)
     return res.status(HttpStatusCode.CONFLICT_409)
               .end()