Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-03-13 | [Credo] fix Credo.Check.Readability.MaxLineLength | Haelwenn (lanodan) Monnier | |
2019-03-13 | [Credo] fix Credo.Check.Readability.AliasOrder | Haelwenn (lanodan) Monnier | |
2019-03-12 | escape quotation marks in Content-Disposition header | rinpatch | |
2019-03-12 | WIP: Stop mangling filenames | rinpatch | |
2019-03-05 | Plugs.HTTPSecurityPlug: Add static_url to CSP's connect-src | Haelwenn (lanodan) Monnier | |
Closes: https://git.pleroma.social/pleroma/pleroma/merge_requests/469 | |||
2019-02-17 | [#468] Merged `upstream/develop`, resolved conflicts. | Ivan Tashkinov | |
2019-02-15 | [#468] Defined OAuth restrictions for all applicable routes. | Ivan Tashkinov | |
Improved missing "scopes" param handling. Allowed "any of" / "all of" mode specification in OAuthScopesPlug. Fixed auth UI / behavior when user selects no permissions at /oauth/authorize. | |||
2019-02-14 | [#468] User UI for OAuth permissions restriction. Standardized storage ↵ | Ivan Tashkinov | |
format for `scopes` fields, updated usages. | |||
2019-02-12 | Plugs.HTTPSecurityPlug: Add webpacker to connect-src | Haelwenn (lanodan) Monnier | |
2019-02-12 | Plugs.HTTPSecurityPlug: Add unsafe-eval to script-src when in dev mode | Haelwenn (lanodan) Monnier | |
This is needed to run dev mode mastofe at the same time | |||
2019-02-12 | Use url[:scheme] instead of protocol to determine if https is enabled | shibayashi | |
2019-02-09 | de-group alias/es | Haelwenn (lanodan) Monnier | |
2019-02-09 | [#468] Prototype of OAuth2 scopes support. TwitterAPI scope restrictions. | Ivan Tashkinov | |
2019-02-09 | Credo fixes: alias grouping/ordering | Haelwenn (lanodan) Monnier | |
2019-02-09 | Credo fixes: parameter consistency | Haelwenn (lanodan) Monnier | |
2019-02-01 | Serve sw-pleroma.js properly | href | |
2019-01-26 | Join on preloads to avoid N+1 queries | href | |
2018-12-31 | update copyright years to 2019 | William Pitcock | |
2018-12-23 | add license boilerplate to pleroma core | William Pitcock | |
2018-12-18 | Add a way to use the admin api without a user. | lain | |
2018-12-17 | Instance/Static runtime plug | href | |
This allows to set-up an arbitrary directory which overrides most of the static files: index.html static/ emoji/ packs/ sounds/ images/ instance/ favicon.png. If the files are not present in the directory, the bundled ones in priv/static will be used. | |||
2018-12-16 | More put_view. | href | |
2018-12-14 | fix and improve web push; add configuration docs | Egor Kislitsyn | |
2018-12-09 | fix compile warnings | Maksim Pechnikov | |
2018-12-06 | Merge branch 'develop' into feature/compat/push-subscriptions | Egor Kislitsyn | |
# Conflicts: # lib/pleroma/application.ex # lib/pleroma/plugs/oauth_plug.ex | |||
2018-12-06 | Merge branch 'develop' into feature/compat/push-subscriptions | Egor Kislitsyn | |
# Conflicts: # lib/mix/tasks/sample_config.eex # lib/pleroma/web/twitter_api/controllers/util_controller.ex # mix.exs # mix.lock | |||
2018-12-05 | fix/273 | Maksim Pechnikov | |
2018-12-01 | More fixes for Info schema. | lain | |
2018-12-01 | Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into ↵ | lain | |
validate-user-info | |||
2018-12-01 | Fix admin api. | lain | |
2018-11-30 | reverse proxy / uploads | href | |
2018-11-30 | Merge remote-tracking branch 'origin' into validate-user-info | lain | |
2018-11-26 | Plugs.HTTPSecurityPlug: Activate upgrade-insecure-requests only when there ↵ | Haelwenn (lanodan) Monnier | |
is https This fixes running mastofe with MIX_ENV=dev | |||
2018-11-26 | Add manifest-src to allow manifest.json | shibayashi | |
2018-11-20 | oauth plug: fix deactivated check | William Pitcock | |
2018-11-17 | lib/pleroma/plugs/user_is_admin_plug.ex: change 403 string to “User is not ↵ | Haelwenn (lanodan) Monnier | |
admin.” | |||
2018-11-17 | [Pleroma.Plugs.UserIsAdminPlug]: Check if admin is true instead of false, ↵ | Haelwenn (lanodan) Monnier | |
fix error reporting | |||
2018-11-17 | lib/pleroma/plugs/user_is_admin_plug.ex: Create | Haelwenn (lanodan) Monnier | |
2018-11-16 | http security: remove form-action from CSP definitions | William Pitcock | |
2018-11-12 | http security: allow referrer-policy to be configured | William Pitcock | |
2018-11-12 | rename CSPPlug to HTTPSecurityPlug. | William Pitcock | |
2018-11-11 | csp plug: add support for certificate transparency | William Pitcock | |
2018-11-11 | csp plug: add sts support | William Pitcock | |
2018-11-11 | plugs: add CSPPlug | William Pitcock | |
2018-11-05 | Runtime configured router | href | |
2018-09-22 | Assign token to connection | Martin Kühl | |
2018-09-05 | Update legacy passwords automatically. | lain | |
2018-09-05 | Add UserEnabledPlug. | lain | |
2018-09-05 | Add SetUserSessionIdPlug. | lain | |
2018-09-05 | Add EnsureUserKeyPlug, smaller fixes | lain | |