#social 2020-09-12

2020-09-12 UTC
vpzom joined the channel
# 05:00 
vpzom I think most implementations require the object and the author to have the same domain
# 05:16 
nightpool[m] heluecht: yes, we enforce a host check here
# 05:17 
nightpool[m] we also enforce that the URL you're resolving is equal to the @id of the created object
# 05:18 
nightpool[m] that was a very embarrassing vulnerability early versions of mastodon had
sl007, testman and erincandescent joined the channel