harden federation: sanitize incoming AP content, fix error handling, tighten rate limits

2026-05-29 12:23:29 +02:00
parent d1f9f55d4f
commit 84ddf04d28
7 changed files with 188 additions and 9 deletions
--- a/crates/adapters/activitypub/src/composite_handler.rs
+++ b/crates/adapters/activitypub/src/composite_handler.rs
@@ -45,7 +45,7 @@ impl ApObjectHandler for CompositeObjectHandler {
        } else if is_watchlist {
            self.watchlist.on_create(ap_id, actor_url, object).await
        } else {
-            tracing::debug!(ap_id = %ap_id, "ignoring Create for unknown object type");
+            tracing::warn!(ap_id = %ap_id, "ignoring Create for unknown object type");
            Ok(())
        }
    }