From 1d4f0247fc226db6d05ca70966d8625e13f0797b Mon Sep 17 00:00:00 2001 From: Seongmin Lee Date: Tue, 14 Jul 2026 03:15:48 +0900 Subject: [PATCH] appview/ingester: validate follow records subject field Signed-off-by: Seongmin Lee --- appview/ingester.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/appview/ingester.go b/appview/ingester.go index 13b60f95..b391d633 100644 --- a/appview/ingester.go +++ b/appview/ingester.go @@ -279,6 +279,11 @@ func (i *Ingester) ingestFollow(e *jmodels.Event, l *slog.Logger) error { l.Error("invalid record", "err", err) return err } + _, err := syntax.ParseDID(record.Subject) + if err != nil { + l.Error("invalid record. subject is invalid DID", "err", err) + return err + } followedAt, err := time.Parse(time.RFC3339, record.CreatedAt) if err != nil { -- 2.51.2