Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-05-31 | Merge branch 'hotfix-0.9.99999'v0.9.99999 | lain | |
2019-05-31 | Bump version. | lain | |
2019-05-31 | html: lock down allowed class attributes to only those related to microformats | William Pitcock | |
2019-05-31 | Transmogrifier: Fix user fetching. | lain | |
2019-05-31 | Mastodon API: Fix lists leaking private posts | rinpatch | |
Our previous list visibility resolver grabbed posts if either follower collection of the user in a list who is followed is in `to` or if follower collection of the user in a list was in `cc`. This not only missed unlisted posts but also lead to leaking private posts when `fix_explicit_addressing` mistakingly started putting follower collections to `cc` (also fixed in this MR). Reported by @kurisu@iscute.moe via a DM | |||
2019-05-31 | Fix fix_explicit_addressing moving follower collection to cc and add tests ↵ | rinpatch | |
for it | |||
2019-04-05 | Update versions.v0.9.9999 | lain | |
2019-04-05 | Fix and format. | lain | |
2019-04-05 | Add test. | lain | |
2019-03-13 | Merge branch 'hotfix-0.9.999'v0.9.999 | lain | |
2019-03-13 | Update version. | lain | |
2019-03-13 | Update frontend | lain | |
2019-03-08 | Correctly identify release.v0.9.99 | lain | |
2019-03-08 | Merge branch 'master' of git.pleroma.social:pleroma/pleroma | lain | |
2019-03-08 | Merge branch 'hotfix-0.9.99' | lain | |
2019-03-08 | Bump version to 0.9.99. | lain | |
2019-03-08 | Add changelog. | lain | |
2019-03-08 | Update frontend | lain | |
2019-03-01 | Merge branch 'cherry-pick-877-to-master' into 'master' | rinpatch | |
Cherry pick !877 to master See merge request pleroma/pleroma!880 | |||
2019-03-01 | activitypub: fix date header format | William Pitcock | |
HTTP date header specification says that days must always be two-digit. Accordingly, change the format string used to ensure days are always represented as two-digit (e.g. 01). | |||
2019-02-22 | Bump version.v0.9.9 | lain | |
2019-02-21 | activitypub: sign http date header | William Pitcock | |
2019-02-21 | mix: add timex dependency | William Pitcock | |
2019-02-21 | tests: fix formatting | William Pitcock | |
2019-02-21 | fix fetching AP objects with application/json | William Pitcock | |
2019-02-21 | tests: add test for fetching AP objects with application/json. | William Pitcock | |
2019-02-19 | add nginx rewrite rule for mediaproxy | iodine | |
2019-02-19 | Remove slicing. | lain | |
2019-02-19 | update frontend | lain | |
2019-02-11 | Revert "Do object insertion through Cachex" | lain | |
This reverts commit 8a270b438c993288853bad94be1daf39f7675e5c. | |||
2019-02-10 | Do object insertion through Cachex | lain | |
So we don't flood our postgres logs with errors. Should also make things slightly faster. | |||
2019-02-09 | Disable rich media by default. | lain | |
2019-02-08 | Merge branch 'fix/do-split-migration-for-local-users-only' into 'develop' | lambda | |
Split hide_network only for local users See merge request pleroma/pleroma!781 | |||
2019-02-08 | Merge branch 'mark-streaming-feature-for-ios-apps' into 'develop' | lambda | |
Mark streaming feature for iOS apps in readme See merge request pleroma/pleroma!790 | |||
2019-02-08 | Merge branch 'oauth2_strengthening' into 'develop' | lambda | |
OAuth2 security fixes: redirect URI validation, "Mastodon-Local" security breach fix See merge request pleroma/pleroma!793 | |||
2019-02-07 | OAuth2 security fixes: redirect URI validation, "Mastodon-Local" security ↵ | Ivan Tashkinov | |
breach fix. (`POST /api/v1/apps` could create "Mastodon-Local" app wth any redirect_uris, and if that happened before /web/login is accessed for the first time then Pleroma used this externally created record with arbitrary redirect_uris and client_secret known by creator). | |||
2019-02-07 | mark streaming feature for ios apps in readme | hakabahitoyo | |
2019-02-07 | Merge branch 'remove-pawoo-apps-from-readme' into 'develop' | kaniini | |
Remove Pawoo apps from README.md See merge request pleroma/pleroma!788 | |||
2019-02-07 | Merge branch 'mark-streaming-feature-for-apps-in-readme' into 'develop' | kaniini | |
Mark streaming feature for Apps in README.md See merge request pleroma/pleroma!789 | |||
2019-02-07 | Mark streaming feature for Apps in README.md | hakabahitoyo | |
2019-02-07 | Update README.md | Hakaba Hitoyo | |
2019-02-06 | Merge branch 'rename-followings' into 'develop' | kaniini | |
hide_followings was renamed to hide_followers in the FE, but never synced up in the BE See merge request pleroma/pleroma!787 | |||
2019-02-06 | hide_followings was renamed to hide_followers in the FE, but never synced up ↵ | Mark Felder | |
in the BE This was a dirty regex replace which worked on my server | |||
2019-02-06 | Merge branch 'bugfix/rich-media-card' into 'develop' | Haelwenn | |
rich media cards: bugfixes and regression tests See merge request pleroma/pleroma!785 | |||
2019-02-06 | tests: add a rich media card that contains all relevant fields | William Pitcock | |
2019-02-06 | Merge branch 'add-admin-and-moderator-fields' into 'develop' | kaniini | |
Add admin and moderator badges to user view and make their visibility configurable See merge request pleroma/pleroma!767 | |||
2019-02-06 | test: add some regression tests for the rich media card rendering | William Pitcock | |
2019-02-06 | mastodon api: rich media: don't clobber %URI struct with a string | William Pitcock | |
2019-02-06 | Merge branch 'mr/exsyslogger-doc-and-format' into 'develop' | Haelwenn | |
Adds a couple examples to docs/config.md for ExSyslogger and removes duplicate timestamps from default format. See merge request pleroma/pleroma!784 | |||
2019-02-06 | adds a couple of explicit examples for ExSyslogger | Michael Loftis | |