Update FederationController, return 404 for invalid webfinger addresses. Fixes #2647

4 years ago · deb6f1153f
parent 723eb00039
commit deb6f1153f
1 changed files with 2 additions and 2 deletions
--- a/app/Http/Controllers/FederationController.php
+++ b/app/Http/Controllers/FederationController.php
@ -53,8 +53,8 @@ class FederationController extends Controller

        $resource = $request->input('resource');
        $parsed = Nickname::normalizeProfileUrl($resource);
-        if($parsed['domain'] !== config('pixelfed.domain.app')) {
-            abort(400);
+        if(empty($parsed) || $parsed['domain'] !== config('pixelfed.domain.app')) {
+            abort(404);
        }
        $username = $parsed['username'];
        $profile = Profile::whereNull('domain')->whereUsername($username)->firstOrFail();