Fix JSON payload being potentially mutated when processing interaction policies (#36392)

1 month ago · d8ddf95485
parent 4c12c2ed60
commit d8ddf95485
1 changed files with 1 additions and 1 deletions
--- a/app/lib/activitypub/parser/status_parser.rb
+++ b/app/lib/activitypub/parser/status_parser.rb
@ -141,7 +141,7 @@ class ActivityPub::Parser::StatusParser
  def quote_subpolicy(subpolicy)
    flags = 0

-    allowed_actors = as_array(subpolicy)
+    allowed_actors = as_array(subpolicy).dup
    allowed_actors.uniq!

    flags |= Status::QUOTE_APPROVAL_POLICY_FLAGS[:public] if allowed_actors.delete('as:Public') || allowed_actors.delete('Public') || allowed_actors.delete('https://www.w3.org/ns/activitystreams#Public')