Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-07-31 | Disallow following locked accounts over OStatus | rinpatch | |
2019-07-31 | ostatus: explicitly disallow protocol downgrade from activitypub | Ariadne Conill | |
This closes embargoed bug #1135. | |||
2019-07-28 | transmogrifier: use User.delete() instead of handrolled user deletion code ↵ | Ariadne Conill | |
for remote users Closes #1104 | |||
2019-07-28 | Fix not being able to pin unlisted posts | rinpatch | |
Closes #1038 | |||
2019-07-28 | preserve the original path/filename (no encoding/decoding) for proxy | Sachin Joshi | |
2019-07-28 | try to always match the filename for proxy url | Sachin Joshi | |
2019-07-28 | Mastodon Controller: Fix tests. | lain | |
2019-07-28 | Status View: Poll ids are strings. | lain | |
All ids in mastodon are strings, in general. | |||
2019-07-14 | fix backport | Ariadne Conill | |
2019-07-14 | HttpRequestMock: Add 404s on OStatus fetching for info.pleroma.site | Haelwenn (lanodan) Monnier | |
2019-07-14 | HttpRequestMock: Add missing mocks for object containment tests | Haelwenn (lanodan) Monnier | |
2019-07-14 | nodeinfo: implement MRF transparency exclusions | Ariadne Conill | |
2019-07-14 | FetcherTest: Containment refute called(OStatus.fetch_activity_from_url) | Haelwenn (lanodan) Monnier | |
2019-07-14 | tests: fix object containment violations in the transmogrifier tests | Ariadne Conill | |
Some objects were not completely rewritten in the tests, which caused object containment violations. Fix them by rewriting the object IDs to be in an appropriate namespace. | |||
2019-07-14 | security: detect object containment violations at the IR level | Ariadne Conill | |
It is more efficient to check for object containment violations at the IR level instead of in the protocol handlers. OStatus containment is especially a tricky situation, as the containment rules don't match those of IR and ActivityPub. Accordingly, we just always do a final containment check at the IR level before the object is added to the IR object graph. | |||
2019-06-27 | Merge branch 'idempotency-plug' into 'develop' | kaniini | |
Add IdempotencyPlug and use it in all of the api Closes #1003 See merge request pleroma/pleroma!1339 | |||
2019-06-27 | don't delete config settings on admin update | Alexander Strizhakov | |
2019-06-27 | Polish IdempotencyPlug | Egor Kislitsyn | |
2019-06-26 | Add Idempotency plug | Egor Kislitsyn | |
2019-06-26 | Return correct response when reply to a direct message is not direct itself | Sergey Suprunenko | |
2019-06-25 | add ignore hosts and TLDs for rich_media | Maksim Pechnikov | |
2019-06-25 | add test | Maksim Pechnikov | |
2019-06-24 | [#184] small refactoring reset password | Maksim | |
2019-06-24 | Rework user deletion | Sergey Suprunenko | |
2019-06-24 | Broadcast conversation update when DM is deleted | Eugenij | |
2019-06-23 | Merge branch 'rich_media_titles_two' into 'develop' | kaniini | |
Rich media titles two See merge request pleroma/pleroma!1325 | |||
2019-06-23 | log capturing | Alex S | |
2019-06-23 | support for config groups | Alex S | |
2019-06-22 | support for tuples with more than 2 values | Alex S | |
2019-06-22 | Rich Media Parser: Do not return just a title if nothing else is there. | lain | |
2019-06-22 | Revert "Revert "Merge branch 'fix/ogp-title' into 'develop'"" | lain | |
This reverts commit b6af80f769195b5047ee8da07166f022c2e29b0a. | |||
2019-06-22 | fix for int and modules | Alex S | |
2019-06-21 | Merge branch 'feature/mrf-anti-link-spam' into 'develop' | kaniini | |
implement anti link spam MRF See merge request pleroma/pleroma!1307 | |||
2019-06-21 | Merge branch 'oauth_secure_redirect' into 'develop' | kaniini | |
OAuth security improvements (`redirect_uri` listing enforcement) See merge request pleroma/pleroma!1302 | |||
2019-06-21 | Merge branch 'revert-6f5a0cc1' into 'develop' | kaniini | |
Revert "Merge branch 'fix/ogp-title' into 'develop'" See merge request pleroma/pleroma!1317 | |||
2019-06-21 | Revert "Merge branch 'fix/ogp-title' into 'develop'" | feld | |
This reverts merge request !1277 | |||
2019-06-21 | Fix rate limiter tests | Egor Kislitsyn | |
2019-06-20 | Fixes for dynamic configuration | Alexander Strizhakov | |
2019-06-19 | unbreak polls | William Pitcock | |
2019-06-19 | implement anti link spam MRF | William Pitcock | |
2019-06-19 | aliases for mix tasks | Alexander Strizhakov | |
ecto.migrate ecto.rollback | |||
2019-06-19 | Merge branch 'fix/rich-media-hashtags-again' into 'develop' | lain | |
Rich Media: Skip Microformats hashtags See merge request pleroma/pleroma!1304 | |||
2019-06-19 | Rich Media: Skip Microformats hashtags | rinpatch | |
When fixing this problem I incorrectly assumed a.hashtag is the proper way for detecting hashtags, but it is just something Pleroma and Mastodon add. Per microformats it should be detected by the presense of rel=tag. This MR adds a check for rel=tag, but I still left a.hashtag just in case | |||
2019-06-18 | Added more `redirect_uri` checks to prevent redirect to not explicitly ↵ | Ivan Tashkinov | |
listed URI. | |||
2019-06-18 | Mastodon API: Sanitize display names | rinpatch | |
Closes #1000 | |||
2019-06-17 | Merge branch 'removing-test-errors' into 'develop' | rinpatch | |
Removing test errors See merge request pleroma/pleroma!1296 | |||
2019-06-16 | Merge branch 'fix/sanitize-report-content' into 'develop' | Haelwenn | |
Sanitize HTML in ReportView Closes #990 See merge request pleroma/pleroma!1293 | |||
2019-06-16 | capturing errors | Alex S | |
2019-06-16 | salmon fix | Alex S | |
removed some ownership sandbox error | |||
2019-06-16 | [#570] add user:notification stream | Maksim | |