actor: don't relay non-public messages

viera/actor.py

@@ -144,7 +144,10 @@ async def handle_create(actor, data, request):
     if check_reqs(content, actor):
         return
 
-    # fetch our IRC bot
+    # check that the message is public before relaying
+    public_uri = 'https://www.w3.org/ns/activitystreams#Public'
+
+    if public_uri in data.get('to', []) or public_uri in data.get('cc', []):
         bot = get_irc_bot()
         bot.relay_message(actor, data['object'], ' '.join(content))