Gregory's ServerPixelfed has shipped a fix to validate timestamps from remote activities, rejecting any dates outside the range (-10 years and +1 day)
 3 comments
 @dansup wait, why -10 years? not every object is freshly authored activitystreams... some objects might be historical, converted from a cms, or even just fetched 10+ years later without the activity. |
@dansup i wonder what prompted this ;)