From fdafaa6639660daaaf3c288b87f851c302b4d9aa Mon Sep 17 00:00:00 2001
From: Anirudh Oppiliappan <x@icyphox.sh>
Date: Tue, 14 Jul 2026 20:07:39 +0300
Subject: [PATCH] appview: validate follow records subject field

Signed-off-by: Seongmin Lee <git@boltless.me>

Signed-off-by: Anirudh Oppiliappan <x@icyphox.sh>
---
 appview/ingester.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/appview/ingester.go b/appview/ingester.go
index 13b60f95..b391d633 100644
--- a/appview/ingester.go
+++ b/appview/ingester.go
@@ -279,6 +279,11 @@ func (i *Ingester) ingestFollow(e *jmodels.Event, l *slog.Logger) error {
 			l.Error("invalid record", "err", err)
 			return err
 		}
+		_, err := syntax.ParseDID(record.Subject)
+		if err != nil {
+			l.Error("invalid record. subject is invalid DID", "err", err)
+			return err
+		}
 
 		followedAt, err := time.Parse(time.RFC3339, record.CreatedAt)
 		if err != nil {
-- 
2.51.2