diff options
author | Egor Kislitsyn <egor@kislitsyn.com> | 2020-04-28 14:13:53 +0400 |
---|---|---|
committer | Egor Kislitsyn <egor@kislitsyn.com> | 2020-04-28 14:13:53 +0400 |
commit | 764b4f95a8e9e751d5a6136fc2be44d61a082443 (patch) | |
tree | fbeea45e76ca9053a19dc41e6b02158c222821bf /docs | |
parent | c56c0a3d23929f166f4d95e5c6e96bbf0df8a35e (diff) | |
parent | 9994768312ede572c4ddd6beda7027b0a2baddce (diff) | |
download | pleroma-764b4f95a8e9e751d5a6136fc2be44d61a082443.tar.gz |
Merge branch 'develop' into global-status-expiration
Diffstat (limited to 'docs')
-rw-r--r-- | docs/API/differences_in_mastoapi_responses.md | 1 | ||||
-rw-r--r-- | docs/configuration/hardening.md | 2 |
2 files changed, 2 insertions, 1 deletions
diff --git a/docs/API/differences_in_mastoapi_responses.md b/docs/API/differences_in_mastoapi_responses.md index 1059155cf..41ceda26b 100644 --- a/docs/API/differences_in_mastoapi_responses.md +++ b/docs/API/differences_in_mastoapi_responses.md @@ -14,6 +14,7 @@ Some apps operate under the assumption that no more than 4 attachments can be re Adding the parameter `with_muted=true` to the timeline queries will also return activities by muted (not by blocked!) users. Adding the parameter `exclude_visibilities` to the timeline queries will exclude the statuses with the given visibilities. The parameter accepts an array of visibility types (`public`, `unlisted`, `private`, `direct`), e.g., `exclude_visibilities[]=direct&exclude_visibilities[]=private`. +Adding the parameter `reply_visibility` to the public and home timelines queries will filter replies. Possible values: without parameter (default) shows all replies, `following` - replies directed to you or users you follow, `self` - replies directed to you. ## Statuses diff --git a/docs/configuration/hardening.md b/docs/configuration/hardening.md index b54c28850..d3bfc4e4a 100644 --- a/docs/configuration/hardening.md +++ b/docs/configuration/hardening.md @@ -36,7 +36,7 @@ content-security-policy: default-src 'none'; base-uri 'self'; frame-ancestors 'none'; - img-src 'self' data: https:; + img-src 'self' data: blob: https:; media-src 'self' https:; style-src 'self' 'unsafe-inline'; font-src 'self'; |