aboutsummaryrefslogtreecommitdiff
path: root/lib/pleroma
AgeCommit message (Collapse)Author
2019-05-31html: lock down allowed class attributes to only those related to microformatsWilliam Pitcock
2019-05-31Transmogrifier: Fix user fetching.lain
2019-05-31Mastodon API: Fix lists leaking private postsrinpatch
Our previous list visibility resolver grabbed posts if either follower collection of the user in a list who is followed is in `to` or if follower collection of the user in a list was in `cc`. This not only missed unlisted posts but also lead to leaking private posts when `fix_explicit_addressing` mistakingly started putting follower collections to `cc` (also fixed in this MR). Reported by @kurisu@iscute.moe via a DM
2019-05-31Fix fix_explicit_addressing moving follower collection to cc and add tests ↵rinpatch
for it
2019-04-05Fix and format.lain
2019-03-01activitypub: fix date header formatWilliam Pitcock
HTTP date header specification says that days must always be two-digit. Accordingly, change the format string used to ensure days are always represented as two-digit (e.g. 01).
2019-02-21activitypub: sign http date headerWilliam Pitcock
2019-02-21fix fetching AP objects with application/jsonWilliam Pitcock
2019-02-11Revert "Do object insertion through Cachex"lain
This reverts commit 8a270b438c993288853bad94be1daf39f7675e5c.
2019-02-10Do object insertion through Cachexlain
So we don't flood our postgres logs with errors. Should also make things slightly faster.
2019-02-07OAuth2 security fixes: redirect URI validation, "Mastodon-Local" security ↵Ivan Tashkinov
breach fix. (`POST /api/v1/apps` could create "Mastodon-Local" app wth any redirect_uris, and if that happened before /web/login is accessed for the first time then Pleroma used this externally created record with arbitrary redirect_uris and client_secret known by creator).
2019-02-06hide_followings was renamed to hide_followers in the FE, but never synced up ↵Mark Felder
in the BE This was a dirty regex replace which worked on my server
2019-02-06Merge branch 'bugfix/rich-media-card' into 'develop'Haelwenn
rich media cards: bugfixes and regression tests See merge request pleroma/pleroma!785
2019-02-06Merge branch 'add-admin-and-moderator-fields' into 'develop'kaniini
Add admin and moderator badges to user view and make their visibility configurable See merge request pleroma/pleroma!767
2019-02-06mastodon api: rich media: don't clobber %URI struct with a stringWilliam Pitcock
2019-02-06Merge branch 'fix/activitypub-user-view-badmap' into 'develop'rinpatch
Fix if clause in activity_pub user_view See merge request pleroma/pleroma!783
2019-02-06Fix if clause in activity_pub user_viewhref
2019-02-06Allow to configure visibility for admin and moderator badgeseugenijm
2019-02-06Add is_admin and is_moderator boolean fields to the user vieweugenijm
2019-02-05rich media: parser: reject any data which cannot be explicitly encoded into JSONWilliam Pitcock
2019-02-05Merge branch 'fix-dm-index' into 'develop'kaniini
Massage index until it actually does the stuff we want. See merge request pleroma/pleroma!772
2019-02-05Merge branch 'feature/ap-c2s-whoami' into 'develop'kaniini
activitypub: c2s: add /api/ap/whoami endpoint for andstatus See merge request pleroma/pleroma!773
2019-02-05Merge branch 'feature/split-hide-network-v2' into 'develop'kaniini
Split hide_network into hide_followers & hide_followings (fixed) See merge request pleroma/pleroma!765
2019-02-05Merge branch 'bugfix/rich-media-image-nil' into 'develop'kaniini
mastodon api: fix rendering of cards without image URLs (closes #597) Closes #597 See merge request pleroma/pleroma!777
2019-02-05mastodon api: fix rendering of cards without image URLs (closes #597)William Pitcock
2019-02-05Merge branch 'bugfix/transmogrifier-bare-tags' into 'develop'lambda
activitypub: transmogrifier: fix bare tags See merge request pleroma/pleroma!774
2019-02-05html: don't attempt to parse nil contentWilliam Pitcock
2019-02-05activitypub: transmogrifier: fix bare tagsWilliam Pitcock
2019-02-04activitypub: c2s: add /api/ap/whoami endpoint for andstatusWilliam Pitcock
2019-02-04Massage index until it actually does the stuff we want.lain
Also makes the index a lot smoler.
2019-02-04Merge branch 'feature/mrf-tag' into 'develop'Haelwenn
MRF TagPolicy engine See merge request pleroma/pleroma!768
2019-02-04activitypub: mrf: tag policy: fix force-unlisted and sandbox actionsWilliam Pitcock
2019-02-04activitypub: mrf: tag policy: add support for subscription controlWilliam Pitcock
2019-02-04Merge branch 'hotfix/hellthread-deprecation-warning' into 'develop'rinpatch
fix hellthread threshold deprecation warning See merge request pleroma/pleroma!770
2019-02-04fix hellthread threshold deprecation warningKaren Konou
2019-02-04activitypub: mrf: tag policy: refactor the filtering hook a bitWilliam Pitcock
2019-02-04activitypub: mrf: tag policy: add support for processing follow requestsWilliam Pitcock
2019-02-04activitypub: mrf: tag policy: implement force-unlisted and sandboxWilliam Pitcock
2019-02-04mrf: add initial MRF.TagPolicy engineWilliam Pitcock
2019-02-04Merge branch 'mime-riff' into 'develop'kaniini
Mime: detect RIFF formats (wave, webp, avi) See merge request pleroma/pleroma!769
2019-02-04Mime: detect RIFF formats (wave, webp, avi)href
2019-02-04Merge branch 'fix/rich-media-relative-path' into 'develop'rinpatch
Fix rich media relative path Closes #588 See merge request pleroma/pleroma!759
2019-02-04Merge branch 'feature/hellthread-filter-improvements' into 'develop'rinpatch
Improve hellthread filter Closes #584 See merge request pleroma/pleroma!766
2019-02-04removed a debug thingyKaren Konou
2019-02-04squished a bugKaren Konou
2019-02-04actually commited the changesKaren Konou
2019-02-04fixed Map,put arguments, updated nomenclatureKaren Konou
2019-02-03more tweaks, fixed silly mistakes...Karen Konou
2019-02-03implemented tweaksKaren Konou
2019-02-03Merge branch 'mogrify-orient' into 'develop'kaniini
Update Mogrify docs and warning for deprecated syntax See merge request pleroma/pleroma!763
generated by cgit v1.2.3 (git 2.26.2) at 2025-04-22 05:34:36 +0000