aboutsummaryrefslogtreecommitdiff
path: root/lib/pleroma
AgeCommit message (Collapse)Author
2020-06-12Merge branch 'fix/csp-mediaproxy-base-url' into 'develop'feld
HTTP security plug: add media proxy base url host to csp See merge request pleroma/pleroma!2638
2020-06-12Merge branch 'bugfix/csp-unproxied' into 'develop'rinpatch
http_security_plug.ex: Fix non-proxied media See merge request pleroma/pleroma!2610
2020-06-12static-fe.css: Restore and move to /priv/static/static-feHaelwenn (lanodan) Monnier
2020-06-12Remove use of atoms in MRF.UserAllowListPolicyhref
2020-06-12Fix atom leak in Rich Media ParserEgor Kislitsyn
2020-06-08Merge branch 'recipients-query-speedup' into 'develop'rinpatch
Greatly speed up recipients query See merge request pleroma/pleroma!2558
2020-06-08Activity.Queries: Use correct actor restriction.lain
2020-06-08ActivityPub: Change ordering to `nulls last` in favorites querylain
This makes it use our existing index and speeds up the query.
2020-06-08Merge branch 'notification-fixes' into 'develop'rinpatch
Notification performance fixes See merge request pleroma/pleroma!2595
2020-06-08[stable rewrite]: fix streamer streaming out announces from a muted threadrinpatch
Use parent object instead of activity because context is null of Announce activity from Mastodon.
2020-06-08Merge branch 'features/apc2s-pagination' into 'develop'Haelwenn
Fix AP C2S pagination Closes #866 and #751 See merge request pleroma/pleroma!2491
2020-06-08Merge branch 'fix/mediaproxy-bypass-emoji' into 'develop'rinpatch
Fix profile emojis bypassing mediaproxy and harden CSP Closes #1810 See merge request pleroma/pleroma!2596
2020-05-13User: Truncate bios when updating a remote user.lain
2020-05-13ActivityPub: Fix non-federating blocks.lain
2020-05-12Transmogrifier: On incoming follow accept, update follow counts.lain
2020-05-12Reorder aliashref
2020-05-12Expand and authorize streams in Streamer directly (backport from !2519)href
2020-05-10healthcheck: report real amount of memory allocated by beamrinpatch
as opposed to memory currently in use
2020-05-10Webfinger: Request account info with the acct schemelain
2020-05-10AP C2S: Restrict creation to `Note`s for now.lain
2020-05-02Dismiss the follow request notification on rejectioneugenijm
2020-05-02Merge branch 'follow-request-notifications' into 'develop'rinpatch
Follow request notifications enforcement See merge request pleroma/pleroma!2451
2020-05-02Merge branch '1559-follow-request-notifications' into 'develop'rinpatch
[#1559] Support for "follow_request" notifications Closes #1559 See merge request pleroma/pleroma!2354
2020-05-01signature.ex: Remove the use of ObjectID typerinpatch
It is not in stable yet
2020-05-01Merge branch 'bugfix/1727-fix-signature-decoding' into 'develop'rinpatch
Bugfix/1727 fix signature decoding Closes #1727 See merge request pleroma/pleroma!2454
2020-05-01Merge branch 'following-relationships-optimizations' into 'develop'rinpatch
FollowingRelationship storage & performance optimizations See merge request pleroma/pleroma!2332
2020-05-01Merge branch 'feature/1677-need_reboot-flag-endpoint' into 'develop'Haelwenn
Added need_reboot endpoint to admin api Closes #1677 See merge request pleroma/pleroma!2373
2020-05-01Uploads: Sandbox them in the CSP.lain
2020-05-01Fix Oban not receiving :ok from RichMediaHelper jobMark Felder
2020-05-01[#1682] Fixed Basic Auth permissions issue by disabling OAuth scopes checks ↵Ivan Tashkinov
when password is provided. Refactored plugs skipping functionality.
2020-05-01Merge branch 'authenticated-api-oauth-check-enforcement' into 'develop'rinpatch
Enforcement of OAuth scopes check for authenticated API endpoints See merge request pleroma/pleroma!2349
2020-05-01Merge branch 'fix-object_age_policy' into 'develop'lain
Fix ObjectAgePolicy See merge request pleroma/pleroma!2404
2020-05-01Merge branch 'bugfix/1670-user-count' into 'develop'Haelwenn
Stats: Ignore internal users for user count. Closes #1670 See merge request pleroma/pleroma!2414
2020-05-01Merge branch 'fix/follow-and-blocks-import' into 'develop'Haelwenn
Fix follower/blocks import when nicknames starts with @ Closes #1698 See merge request pleroma/pleroma!2416
2020-05-01CommonAPI: Don't make repeating announces possiblelain
2020-05-01Let blob: pass CSPAlex Gleason
2020-05-01Mastodon API: do not create a following relationship if the corresponding ↵eugenijm
follow request doesn't exist when calling `POST /api/v1/follow_requests/:id/authorize`
2020-05-01Deactivate local users on deletion instead of deleting the recordrinpatch
Prevents the possibility of re-registration, which allowed to read DMs of the deleted account. Also includes a migration that tries to find any already deleted accounts and insert skeletons for them. Closes pleroma/pleroma#1687
2020-04-08Merge branch 'fix-auto-link-for-profile-fields' into 'develop'rinpatch
Use Pleroma.Formatter.linkify/2 instead See merge request pleroma/pleroma!2352
2020-04-02Merge branch 'feature/funkwhale-audio' into 'develop'Haelwenn
Add support for funkwhale Audio activity Closes #764 and #1624 See merge request pleroma/pleroma!2287
2020-04-02Merge branch 'bugfix/funkwhale-channel' into 'develop'Haelwenn
Fix profile url for funkwhale channels, removes one source_data use Closes #1653 See merge request pleroma/pleroma!2333
2020-03-31Merge branch 'bugfix/profile-bio-newline' into 'develop'rinpatch
AccountView: fix for other forms of <br> in bio Closes #1643 See merge request pleroma/pleroma!2322
2020-03-31Merge branch 'admin-api-change-password' into 'develop'lain
Admin API: `PATCH /api/pleroma/admin/users/:nickname/update_credentials` See merge request pleroma/pleroma!2149
2020-03-31Merge branch 'fix/activity-deletion' into 'develop'feld
Fix activity deletion Closes #1640 See merge request pleroma/pleroma!2328
2020-03-31Merge branch '1364-notifications-sending-control' into 'develop'rinpatch
[#1364] Ability to opt-out of notifications (in all clients) Closes #1364 See merge request pleroma/pleroma!2301
2020-03-16rate limiter: disable based on if remote ip was found, not on if the plug ↵rinpatch
was enabled The current rate limiter disable logic won't trigger when the remote ip is not forwarded, only when the remoteip plug is not enabled, which is not the case on most instances since it's enabled by default. This changes the behavior to warn and disable when the remote ip was not forwarded, even if the RemoteIP plug is enabled. Also closes #1620
2020-03-16rip out fetch_initial_postsrinpatch
Every time someone tries to use it, it goes mad and tries to scrape the entire fediverse for no visible reason, it's better to just remove it than continue shipping it in it's current state. idea acked by lain and feld on irc Closes #1595 #1422
2020-03-16Merge branch 'features/staticfe-sanitization' into 'develop'rinpatch
static_fe: Sanitize HTML Closes #1614 See merge request pleroma/pleroma!2299
2020-03-15pleroma_api_controller.ex: Improve conversations error reportingHaelwenn (lanodan) Monnier
Related: https://git.pleroma.social/pleroma/pleroma/issues/1594
2020-03-15Merge branch 'fix/cache-control-headers' into 'develop'rinpatch
Fix Cache Control headers on media See merge request pleroma/pleroma!2295