Merge remote-tracking branch 'parent/main' into kbtopic-fix-security

This commit is contained in:
KMY 2024-02-02 07:38:19 +09:00
commit 9a5f80c41d
36 changed files with 609 additions and 179 deletions

View file

@ -163,8 +163,8 @@ module JsonLdHelper
end
end
def fetch_resource(uri, id, on_behalf_of = nil, request_options: {})
unless id
def fetch_resource(uri, id_is_known, on_behalf_of = nil, request_options: {})
unless id_is_known
json = fetch_resource_without_id_validation(uri, on_behalf_of)
return if !json.is_a?(Hash) || unsupported_uri_scheme?(json['id'])