mirrors/fep
1
0
Fork 0
mirror of https://codeberg.org/fediverse/fep.git synced 2026-08-08 13:35:51 +00:00
Code Packages Wiki Activity

Deploying from 9ad3767987 [SKIP CI]

Browse Source
This commit is contained in:
silverpill
2026-08-01 20:54:33 +00:00
parent d7d9fede2b
commit 4f746e3b93
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fep/fe34/index.html
+1 -1
View File
@@ -815,7 +815,7 @@
<li>The embedded object is anonymous, or has the same <a href="#ownership">owner</a> as the wrapping object.</li>
</ul>
<p>Consumers MUST NOT trust embedded objects that do not satisfy these conditions.</p>
<p>In order to mitigate impersonation risks resulting from consumers not verifying ownership during the authentication, originating servers MUST enforce actor isolation by recursively verifying those objects when a client submits an activity. If an embedded object is owned by a different local actor, the server must either authenticate the object or reject the activity.</p>
<p>In order to mitigate impersonation risks resulting from consumers not verifying ownership during the authentication, originating servers MUST enforce actor isolation by recursively verifying embedded objects when a client submits an activity. If an embedded object is owned by a different local actor, the server must either authenticate the object or reject the activity.</p>
<p>Embedded non-anonymous objects SHOULD NOT be partial representations. A server that relies on embedding for authentication might save a partial representation of an object to the cache, replacing the full object.</p>
<div class="admonition note">
<p class="admonition-title">Note</p>
search/search_index.json
+1 -1
View File
File diff suppressed because one or more lines are too long