From e7db1c7175631ca6bf77b63cb117da51a046db69 Mon Sep 17 00:00:00 2001
From: grunfink <grunfink@comam.es>
Date: Wed, 2 Sep 2026 10:23:24 +0200
Subject: Also drop too big messages in activitypub_request().

---
 activitypub.c | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'activitypub.c')

diff --git a/activitypub.c b/activitypub.c
index c148812..7687013 100644
--- a/activitypub.c
+++ b/activitypub.c
@@ -82,6 +82,9 @@ int activitypub_request(snac *user, const char *url, xs_dict **data)
             NULL, NULL, 0, &status, &payload, &p_size, 0);
     }
 
+    if (p_size >= 100000)
+        return HTTP_STATUS_BAD_REQUEST;
+
     if (status == 0 || (status >= 500 && status <= 599)) {
         /* I found an instance running Misskey that returned
            500 on signed messages but returned the object
-- 
cgit