Update FederationController, return 404 for invalid webfinger address…

…es. Fixes #2647
pixelfed · Feb 13, 2021 · deb6f11 · deb6f11
1 parent 723eb00
commit deb6f11
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app/Http/Controllers/FederationController.php b/app/Http/Controllers/FederationController.php
@@ -53,8 +53,8 @@ public function webfinger(Request $request)
 
         $resource = $request->input('resource');
         $parsed = Nickname::normalizeProfileUrl($resource);
-        if($parsed['domain'] !== config('pixelfed.domain.app')) {
-            abort(400);
+        if(empty($parsed) || $parsed['domain'] !== config('pixelfed.domain.app')) {
+            abort(404);
         }
         $username = $parsed['username'];
         $profile = Profile::whereNull('domain')->whereUsername($username)->firstOrFail();