NodeBB / NodeBB / 29587702051

85%

push

github

fix(activitypub): use raw body buffer for digest verification

The HTTP Digest header is calculated over the exact raw bytes of the
request body. JSON.stringify(req.body) can differ in whitespace and key
ordering, causing digest mismatches.

Capture the raw buffer via bodyParser.json() verify callback and use it
for digest calculation in ActivityPub.verify().

Assisted-by: unsloth/Qwen3.6-35B-A3B-GGUF

14194 of 19327 branches covered (73.44%)

2 of 2 new or added lines in 2 files covered. (100.0%)

29429 of 34451 relevant lines covered (85.42%)

3347.4 hits per line