aboutsummaryrefslogtreecommitdiff
path: root/lib/pleroma/web
AgeCommit message (Collapse)Author
2019-05-31Transmogrifier: Fix user fetching.lain
2019-05-31Mastodon API: Fix lists leaking private postsrinpatch
Our previous list visibility resolver grabbed posts if either follower collection of the user in a list who is followed is in `to` or if follower collection of the user in a list was in `cc`. This not only missed unlisted posts but also lead to leaking private posts when `fix_explicit_addressing` mistakingly started putting follower collections to `cc` (also fixed in this MR). Reported by @kurisu@iscute.moe via a DM
2019-05-31Fix fix_explicit_addressing moving follower collection to cc and add tests ↵rinpatch
for it
2019-04-05Fix and format.lain
2019-03-01activitypub: fix date header formatWilliam Pitcock
HTTP date header specification says that days must always be two-digit. Accordingly, change the format string used to ensure days are always represented as two-digit (e.g. 01).
2019-02-21activitypub: sign http date headerWilliam Pitcock
2019-02-21fix fetching AP objects with application/jsonWilliam Pitcock
2019-02-11Revert "Do object insertion through Cachex"lain
This reverts commit 8a270b438c993288853bad94be1daf39f7675e5c.
2019-02-10Do object insertion through Cachexlain
So we don't flood our postgres logs with errors. Should also make things slightly faster.
2019-02-07OAuth2 security fixes: redirect URI validation, "Mastodon-Local" security ↵Ivan Tashkinov
breach fix. (`POST /api/v1/apps` could create "Mastodon-Local" app wth any redirect_uris, and if that happened before /web/login is accessed for the first time then Pleroma used this externally created record with arbitrary redirect_uris and client_secret known by creator).
2019-02-06hide_followings was renamed to hide_followers in the FE, but never synced up ↵Mark Felder
in the BE This was a dirty regex replace which worked on my server
2019-02-06Merge branch 'bugfix/rich-media-card' into 'develop'Haelwenn
rich media cards: bugfixes and regression tests See merge request pleroma/pleroma!785
2019-02-06Merge branch 'add-admin-and-moderator-fields' into 'develop'kaniini
Add admin and moderator badges to user view and make their visibility configurable See merge request pleroma/pleroma!767
2019-02-06mastodon api: rich media: don't clobber %URI struct with a stringWilliam Pitcock
2019-02-06Merge branch 'fix/activitypub-user-view-badmap' into 'develop'rinpatch
Fix if clause in activity_pub user_view See merge request pleroma/pleroma!783
2019-02-06Fix if clause in activity_pub user_viewhref
2019-02-06Allow to configure visibility for admin and moderator badgeseugenijm
2019-02-06Add is_admin and is_moderator boolean fields to the user vieweugenijm
2019-02-05rich media: parser: reject any data which cannot be explicitly encoded into JSONWilliam Pitcock
2019-02-05Merge branch 'fix-dm-index' into 'develop'kaniini
Massage index until it actually does the stuff we want. See merge request pleroma/pleroma!772
2019-02-05Merge branch 'feature/ap-c2s-whoami' into 'develop'kaniini
activitypub: c2s: add /api/ap/whoami endpoint for andstatus See merge request pleroma/pleroma!773
2019-02-05Merge branch 'feature/split-hide-network-v2' into 'develop'kaniini
Split hide_network into hide_followers & hide_followings (fixed) See merge request pleroma/pleroma!765
2019-02-05Merge branch 'bugfix/rich-media-image-nil' into 'develop'kaniini
mastodon api: fix rendering of cards without image URLs (closes #597) Closes #597 See merge request pleroma/pleroma!777
2019-02-05mastodon api: fix rendering of cards without image URLs (closes #597)William Pitcock
2019-02-05activitypub: transmogrifier: fix bare tagsWilliam Pitcock
2019-02-04activitypub: c2s: add /api/ap/whoami endpoint for andstatusWilliam Pitcock
2019-02-04Massage index until it actually does the stuff we want.lain
Also makes the index a lot smoler.
2019-02-04activitypub: mrf: tag policy: fix force-unlisted and sandbox actionsWilliam Pitcock
2019-02-04activitypub: mrf: tag policy: add support for subscription controlWilliam Pitcock
2019-02-04activitypub: mrf: tag policy: refactor the filtering hook a bitWilliam Pitcock
2019-02-04activitypub: mrf: tag policy: add support for processing follow requestsWilliam Pitcock
2019-02-04activitypub: mrf: tag policy: implement force-unlisted and sandboxWilliam Pitcock
2019-02-04mrf: add initial MRF.TagPolicy engineWilliam Pitcock
2019-02-04Merge branch 'fix/rich-media-relative-path' into 'develop'rinpatch
Fix rich media relative path Closes #588 See merge request pleroma/pleroma!759
2019-02-04Merge branch 'feature/hellthread-filter-improvements' into 'develop'rinpatch
Improve hellthread filter Closes #584 See merge request pleroma/pleroma!766
2019-02-04removed a debug thingyKaren Konou
2019-02-04squished a bugKaren Konou
2019-02-04actually commited the changesKaren Konou
2019-02-04fixed Map,put arguments, updated nomenclatureKaren Konou
2019-02-03more tweaks, fixed silly mistakes...Karen Konou
2019-02-03implemented tweaksKaren Konou
2019-02-03fixed thingsKaren Konou
2019-02-03made toggleable, added docsKaren Konou
2019-02-03added optional delist featureKaren Konou
2019-02-03Split hide_network into hide_followers & hide_followings (fixed)Maxim Filippov
2019-02-03Merge branch '589-fix-cache' into 'develop'lambda
Resolve "Update object cache on favs/boosts" Closes #589 See merge request pleroma/pleroma!764
2019-02-03Still do caching in tests.lain
2019-02-03[#582] Made single-pub task call Instance.set_reachable/1 if `set_reachable` ↵Ivan Tashkinov
is not specified. Added tests.
2019-02-03[#582] Optimized federation retirement by reducing the number of SQL callsIvan Tashkinov
(calling `Instances.set_reachable/1` only if instance had `unreachable_since`, calling `Instances.set_unreachable/1` only if instance had nil `unreachable_since`).
2019-02-02Add responsive features to layoutMaxim Filippov
generated by cgit v1.2.3 (git 2.26.2) at 2025-04-22 16:34:07 +0000