aboutsummaryrefslogtreecommitdiff
path: root/lib/pleroma/plugs
AgeCommit message (Collapse)Author
2019-03-15Merge branch 'robotstxt' into 'develop'kaniini
Add robots.txt Closes #723 See merge request pleroma/pleroma!929
2019-03-15robots.txtWilliam Pearson
Add default robots.txt that allows bots access to all paths. Add mix task to generate robots.txt taht allows bots access to no paths. Document custom emojis, MRF and static_dir static_dir documentation includes docs for the robots.txt Mix task.
2019-03-14Merge develop to bump elixir version in the CI so I don't get failing formattingrinpatch
2019-03-14Add some testsrinpatch
2019-03-13[Credo] fix Credo.Check.Readability.MaxLineLengthHaelwenn (lanodan) Monnier
2019-03-13[Credo] fix Credo.Check.Readability.AliasOrderHaelwenn (lanodan) Monnier
2019-03-12escape quotation marks in Content-Disposition headerrinpatch
2019-03-12WIP: Stop mangling filenamesrinpatch
2019-03-05Plugs.HTTPSecurityPlug: Add static_url to CSP's connect-srcHaelwenn (lanodan) Monnier
Closes: https://git.pleroma.social/pleroma/pleroma/merge_requests/469
2019-02-17[#468] Merged `upstream/develop`, resolved conflicts.Ivan Tashkinov
2019-02-15[#468] Defined OAuth restrictions for all applicable routes.Ivan Tashkinov
Improved missing "scopes" param handling. Allowed "any of" / "all of" mode specification in OAuthScopesPlug. Fixed auth UI / behavior when user selects no permissions at /oauth/authorize.
2019-02-14[#468] User UI for OAuth permissions restriction. Standardized storage ↵Ivan Tashkinov
format for `scopes` fields, updated usages.
2019-02-12Plugs.HTTPSecurityPlug: Add webpacker to connect-srcHaelwenn (lanodan) Monnier
2019-02-12Plugs.HTTPSecurityPlug: Add unsafe-eval to script-src when in dev modeHaelwenn (lanodan) Monnier
This is needed to run dev mode mastofe at the same time
2019-02-12Use url[:scheme] instead of protocol to determine if https is enabledshibayashi
2019-02-09de-group alias/esHaelwenn (lanodan) Monnier
2019-02-09[#468] Prototype of OAuth2 scopes support. TwitterAPI scope restrictions.Ivan Tashkinov
2019-02-09Credo fixes: alias grouping/orderingHaelwenn (lanodan) Monnier
2019-02-09Credo fixes: parameter consistencyHaelwenn (lanodan) Monnier
2019-02-01Serve sw-pleroma.js properlyhref
2019-01-26Join on preloads to avoid N+1 querieshref
2018-12-31update copyright years to 2019William Pitcock
2018-12-23add license boilerplate to pleroma coreWilliam Pitcock
2018-12-18Add a way to use the admin api without a user.lain
2018-12-17Instance/Static runtime plughref
This allows to set-up an arbitrary directory which overrides most of the static files: index.html static/ emoji/ packs/ sounds/ images/ instance/ favicon.png. If the files are not present in the directory, the bundled ones in priv/static will be used.
2018-12-16More put_view.href
2018-12-14fix and improve web push; add configuration docsEgor Kislitsyn
2018-12-09fix compile warningsMaksim Pechnikov
2018-12-06Merge branch 'develop' into feature/compat/push-subscriptionsEgor Kislitsyn
# Conflicts: # lib/pleroma/application.ex # lib/pleroma/plugs/oauth_plug.ex
2018-12-06Merge branch 'develop' into feature/compat/push-subscriptionsEgor Kislitsyn
# Conflicts: # lib/mix/tasks/sample_config.eex # lib/pleroma/web/twitter_api/controllers/util_controller.ex # mix.exs # mix.lock
2018-12-05fix/273Maksim Pechnikov
2018-12-01More fixes for Info schema.lain
2018-12-01Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into ↵lain
validate-user-info
2018-12-01Fix admin api.lain
2018-11-30reverse proxy / uploadshref
2018-11-30Merge remote-tracking branch 'origin' into validate-user-infolain
2018-11-26Plugs.HTTPSecurityPlug: Activate upgrade-insecure-requests only when there ↵Haelwenn (lanodan) Monnier
is https This fixes running mastofe with MIX_ENV=dev
2018-11-26Add manifest-src to allow manifest.jsonshibayashi
2018-11-20oauth plug: fix deactivated checkWilliam Pitcock
2018-11-17lib/pleroma/plugs/user_is_admin_plug.ex: change 403 string to “User is not ↵Haelwenn (lanodan) Monnier
admin.”
2018-11-17[Pleroma.Plugs.UserIsAdminPlug]: Check if admin is true instead of false, ↵Haelwenn (lanodan) Monnier
fix error reporting
2018-11-17lib/pleroma/plugs/user_is_admin_plug.ex: CreateHaelwenn (lanodan) Monnier
2018-11-16http security: remove form-action from CSP definitionsWilliam Pitcock
2018-11-12http security: allow referrer-policy to be configuredWilliam Pitcock
2018-11-12rename CSPPlug to HTTPSecurityPlug.William Pitcock
2018-11-11csp plug: add support for certificate transparencyWilliam Pitcock
2018-11-11csp plug: add sts supportWilliam Pitcock
2018-11-11plugs: add CSPPlugWilliam Pitcock
2018-11-05Runtime configured routerhref
2018-09-22Assign token to connectionMartin Kühl