aboutsummaryrefslogtreecommitdiff
path: root/lib/pleroma/plugs
AgeCommit message (Expand)Author
2020-06-11Check for media proxy base_url, not Upload base_urlMark Felder
2020-06-10HTTP security plug: add media proxy base url host to csprinpatch
2020-05-29Merge branch 'bugfix/csp-unproxied' into 'develop'rinpatch
2020-05-29Apply suggestion to lib/pleroma/plugs/http_security_plug.exrinpatch
2020-05-29Add blob: to connect-src CSPAlex Gleason
2020-05-29http_security_plug.ex: Fix non-proxied mediaHaelwenn (lanodan) Monnier
2020-05-29HTTP Security plug: make starting csp string generation more readablerinpatch
2020-05-27HTTP security plug: Harden img-src and media-src when MediaProxy is enabledrinpatch
2020-05-27HTTP Security plug: rewrite &csp_string/0rinpatch
2020-05-17AuthenticationPlug: Also update crypt passwords.lain
2020-05-17Authentication Plug: Update bcrypt password on login.lain
2020-05-14Pbkdf2.verify_pass --> AuthenticationPlug.checkpwAlex Gleason
2020-05-13Handle bcrypt passwords for Mastodon migrationAlex Gleason
2020-05-12Upgrade Comeonin to v5Alex Gleason
2020-05-07Pleroma.Web.TwitterAPI.TwoFactorAuthenticationController -> Pleroma.Web.Plero...Maksim
2020-05-06Merge branch 'plug-if-unless-func-options-refactoring' into 'develop'lain
2020-05-02static-fe.css: Restore and move to /priv/static/static-feHaelwenn (lanodan) Monnier
2020-05-01MappedSignatureToIdentityPlug: Fix.lain
2020-04-30Refactoring of :if_func / :unless_func plug options (general availability). A...Ivan Tashkinov
2020-04-28Merge remote-tracking branch 'remotes/origin/develop' into automatic-authenti...Ivan Tashkinov
2020-04-26Let blob: pass CSPAlex Gleason
2020-04-22Fixed OAuth restrictions for :api routes. Made auth info dropped for :api rou...Ivan Tashkinov
2020-04-21Automatic checks of authentication / instance publicity. Definition of missin...Ivan Tashkinov
2020-04-17[#1682] Fixed Basic Auth permissions issue by disabling OAuth scopes checks w...Ivan Tashkinov
2020-04-15[#2349] Made :skip_plug/2 prevent plug from being executed even if explicitly...Ivan Tashkinov
2020-04-15Merge remote-tracking branch 'remotes/origin/develop' into authenticated-api-...Ivan Tashkinov
2020-04-15Merge branch 'fix/1659-rate-limiter' into 'develop'Haelwenn
2020-04-15remote_ip plug adds remote_ip_found flagAlexander Strizhakov
2020-04-15Uploads: Sandbox them in the CSP.lain
2020-04-14fix logger messageMaksim Pechnikov
2020-04-06Enforcement of OAuth scopes check for authenticated API endpoints, :skip_plug...Ivan Tashkinov
2020-03-15Merge branch '1560-non-federating-instances-routes-restrictions' into 'develop'lain
2020-03-15Merge branch 'fix/rate-limiter-remoteip-behavior' into 'develop'Haelwenn
2020-03-14Merge remote-tracking branch 'remotes/origin/develop' into 1560-non-federatin...Ivan Tashkinov
2020-03-14Merge branch 'fix/cache-control-headers' into 'develop'rinpatch
2020-03-13uploaded media plug: do not inject compile-time params on every requestrinpatch
2020-03-13Merge branch 'static-accept-missing' into 'develop'rinpatch
2020-03-13rate limiter: disable based on if remote ip was found, not on if the plug was...rinpatch
2020-03-13Synchronize cache-control header for local media with the mediaproxyMark Felder
2020-03-13Set correct Cache-Control header for local mediaMark Felder
2020-03-09[#1560] Ensured authentication or enabled federation for federation-related r...Ivan Tashkinov
2020-03-06Merge remote-tracking branch 'remotes/origin/develop' into 1560-non-federatin...Ivan Tashkinov
2020-03-05[#1560] Misc. improvements in ActivityPubController federation state restrict...Ivan Tashkinov
2020-03-03Update CopyrightsMark Felder
2020-03-03[#1560] ActivityPubController federation state restrictions adjustments. Adju...Ivan Tashkinov
2020-03-02Merge remote-tracking branch 'remotes/origin/develop' into 1560-non-federatin...Ivan Tashkinov
2020-03-02Bump copyright years of files changed after 2020-01-07Haelwenn (lanodan) Monnier
2020-02-29Fix static FE plug to handle missing Accept header.Phil Hagelberg
2020-03-01rate limiter: Fix a race conditionrinpatch
2020-02-29[#2250] Tiny refactoring per merge request review.Ivan Tashkinov