Update ToDo

This commit is contained in:
erik 2023-12-07 13:53:37 +01:00 committed by Michael Jerger
parent afe659f9f4
commit 22d71e6b30

View file

@ -262,6 +262,8 @@ func RepositoryInbox(ctx *context.APIContext) {
// Check if user already exists // Check if user already exists
// TODO: If the usesrs-id points to our current host, we've to use an alterantive search ... // TODO: If the usesrs-id points to our current host, we've to use an alterantive search ...
// > We might need to discuss this further with the community, because when we execute this bit of code here, the federated api has been called.
// > Thus the searching for non-federated users could facilitate spoofing of already existing user-ids for some (malicious) purposes.
users, err := searchUsersByPerson(remoteStargazer) users, err := searchUsersByPerson(remoteStargazer)
if err != nil { if err != nil {
panic(fmt.Errorf("searching for user failed: %v", err)) panic(fmt.Errorf("searching for user failed: %v", err))