From 654a8e4396e9c85677ae2486d4a8dd3da7ee8293 Mon Sep 17 00:00:00 2001
From: Alain St-Denis <alain@zenfolie.org>
Date: Fri, 24 Feb 2023 08:30:44 -0500
Subject: [PATCH] Validate the actor_id (AP attributedTo) property.

---
 federation/entities/activitypub/models.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/federation/entities/activitypub/models.py b/federation/entities/activitypub/models.py
index c4cf8a8..7c9c9d3 100644
--- a/federation/entities/activitypub/models.py
+++ b/federation/entities/activitypub/models.py
@@ -971,6 +971,9 @@ class Note(Object, RawContentMixin):
         self._cached_children = value
         self.attachment = [Image.from_base(i) for i in value]
 
+    def validate_actor_id(self):
+        if not self.actor_id.startswith('http'):
+            raise ValueError(f'Invalid actor_id for activitypub ({self.actor_id})')
 
     class Meta:
         rdf_type = as2.Note