Mint
|
1afde067b1
|
CommonAPI: Prevent users from accessing media of other users
|
2023-09-03 10:41:37 +02:00 |
|
mae
|
48b1e9bdc7
|
Completely disable xml entity resolution
|
2023-08-05 14:17:04 +02:00 |
|
FloatingGhost
|
307692cee8
|
Add unit test for external entity loading
|
2023-08-05 08:14:27 +02:00 |
|
Haelwenn
|
819fccb7d1
|
Merge branch 'tusooa/3154-attachment-type-check' into 'develop'
Restrict attachments to only uploaded files only
Closes #3154
See merge request pleroma/pleroma!3923
|
2023-08-03 10:01:32 +00:00 |
|
faried nawaz
|
dc4de79d43
|
status context: perform visibility check on activities around a status
issue #2927
|
2023-07-28 18:45:59 +05:00 |
|
tusooa
|
ea4225a646
|
Restrict attachments to only uploaded files only
|
2023-07-18 18:39:59 -04:00 |
|
tusooa
|
1459d64508
|
Make regex-to-string descriptor reusable
|
2023-07-07 07:09:35 -04:00 |
|
tusooa
|
ba3aa4f86d
|
Fix edge cases
|
2023-07-07 06:58:32 -04:00 |
|
tusooa
|
d670dbdbd3
|
Test that unicode emoji reactions are not affected
|
2023-07-07 06:58:32 -04:00 |
|
tusooa
|
ef8a6c539a
|
Make EmojiPolicy aware of custom emoji reactions
|
2023-07-07 06:58:31 -04:00 |
|
tusooa
|
7eb8abf7bb
|
EmojiPolicy: Implement delist
|
2023-07-07 06:58:31 -04:00 |
|
tusooa
|
80ce6482f6
|
EmojiPolicy: implement remove by shortcode
|
2023-07-07 06:58:31 -04:00 |
|
tusooa
|
28ff828caa
|
Add emoji policy to remove emojis matching certain urls
https://git.pleroma.social/pleroma/pleroma/-/issues/2775
|
2023-07-07 06:58:22 -04:00 |
|
Haelwenn
|
a31a4c522f
|
Merge branch 'tusooa/3131-handle-report-from-deactivated-user' into 'develop'
Fix handling report from a deactivated user
Closes #3131
See merge request pleroma/pleroma!3915
|
2023-07-02 21:27:15 +00:00 |
|
tusooa
|
6e4de2383f
|
Fix handling report from a deactivated user
|
2023-07-02 11:15:34 -04:00 |
|
tusooa
|
a1621839cc
|
Fix user fetch completely broken if featured collection is not in a supported form
|
2023-07-02 11:03:09 -04:00 |
|
tusooa
|
48e490cd58
|
Merge branch 'bugfix/full-revert-media-host-validation' into 'develop'
Merge Revert "Merge branch 'validate-host' into 'develop'"
Closes #3136
See merge request pleroma/pleroma!3909
|
2023-07-01 21:54:18 +00:00 |
|
Haelwenn
|
ae0ca49451
|
Merge branch 'tusooa/3119-bio-update' into 'develop'
Show more informative errors when profile exceeds char limits
Closes #3119
See merge request pleroma/pleroma!3886
|
2023-06-27 18:49:43 +00:00 |
|
Haelwenn
|
41f2ee69a8
|
Merge branch 'from/upstream-develop/tusooa/backup-status' into 'develop'
Detail backup states
Closes #3024
See merge request pleroma/pleroma!3809
|
2023-06-27 12:08:11 +00:00 |
|
Haelwenn (lanodan) Monnier
|
dd9f8150fc
|
Merge Revert "Merge branch 'validate-host' into 'develop'"
This reverts commit d998a114e2, reversing
changes made to da6b4003ac.
|
2023-06-22 21:28:25 +02:00 |
|
lain
|
4e6ea7cc91
|
Merge branch 'tusooa/3054-banned-delete' into 'develop'
Fix deleting banned users' statuses
See merge request pleroma/pleroma!3889
|
2023-06-11 13:17:12 +00:00 |
|
Lain Soykaf
|
6611c6ce4e
|
B ForceMentionsInContent: Fix test, refactor.
|
2023-06-11 16:45:31 +04:00 |
|
Lain Soykaf
|
55dd8ef1c7
|
Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into pleroma-double_mentions
|
2023-06-11 16:31:20 +04:00 |
|
lain
|
16313af7eb
|
Merge branch 'fix/metadata-tags' into 'develop'
static frontend: fix meta tags
See merge request pleroma/pleroma!3885
|
2023-06-11 11:57:16 +00:00 |
|
lain
|
1f4618d64b
|
Merge branch 'cleanup/ostatus-user-upgrade' into 'develop'
Cleanup OStatus-era user upgrades and ap_enabled indicator
See merge request pleroma/pleroma!3880
|
2023-06-11 11:13:57 +00:00 |
|
Mark Felder
|
fadcd7f1a9
|
Revert MediaProxy Host header validation
Something is going wrong here even though the tests are correct.
|
2023-06-07 09:19:22 -04:00 |
|
Mark Felder
|
46c799f528
|
Use Phoenix.ConnTest.redirected_to/2
|
2023-05-31 09:54:37 -04:00 |
|
Mark Felder
|
b3c3bd99c3
|
Switch from serving a 400 to a 302
|
2023-05-30 16:56:09 -04:00 |
|
Mark Felder
|
a60dd0d92d
|
Validate Host header matches expected value before allowing access to Uploads
|
2023-05-29 14:16:03 -04:00 |
|
Mark Felder
|
843fcca5b4
|
Validate Host header matches expected value before allowing access to MediaProxy
|
2023-05-29 13:59:51 -04:00 |
|
faried nawaz
|
4c91c0d1ba
|
oops, forgot the test cases
|
2023-05-29 02:52:50 +05:00 |
|
Haelwenn (lanodan) Monnier
|
869f0d24a6
|
Merge branch 'release/2.5.2' into mergeback/2.5.2
|
2023-05-26 23:47:50 +02:00 |
|
Mark Felder
|
4505bc1e58
|
Filter OEmbed HTML tags
|
2023-05-26 19:56:36 +02:00 |
|
Mark Felder
|
0d68804aa7
|
Filter OEmbed HTML tags
|
2023-05-26 19:54:24 +02:00 |
|
tusooa
|
d0c2e0830b
|
Enforce unauth restrictions for public streaming endpoints
|
2023-05-26 19:24:08 +02:00 |
|
Haelwenn
|
b36263e5ff
|
Merge branch 'issue/3126' into 'develop'
MediaProxyController: Apply CSP sandbox
See merge request pleroma/pleroma!3890
|
2023-05-26 19:24:08 +02:00 |
|
Mark Felder
|
38bcf6b19e
|
MediaProxyController: Apply CSP sandbox
|
2023-05-26 12:34:01 -04:00 |
|
Zero
|
279fd47b48
|
ForceMentionsInContent: fix double mentions for Mastodon/Misskey posts
The code checked for duplicates using "ap_id", but in Mastodon and Misskey the look like that:
Mastodon: https://mastodon.example.com/users/roger
Misskey: https:///misskey.example.com/users/104ab42f11
The fix is to also check for "uri", which is what will be in the "explicitly_mentioned_uris" list:
Mastodon: https://mastodon.example.com/@roger
Misskey: https://misskey.example.com/@roger
|
2023-05-26 12:30:19 -04:00 |
|
tusooa
|
1fa196d8f7
|
Fix deleting banned users' statuses
|
2023-05-25 19:00:38 -04:00 |
|
tusooa
|
2c66f584b5
|
Show more informative errors when profile exceeds char limits
|
2023-05-25 08:22:33 -04:00 |
|
Haelwenn
|
0524e66a05
|
Merge branch 'accept-tags-2.5' into 'develop'
TagValidator: Drop unrecognized Tag types
Closes #2952
See merge request pleroma/pleroma!3823
|
2023-05-17 19:04:51 +00:00 |
|
Haelwenn
|
ce1c0f75cd
|
Merge branch 'tusooa/3065-scopes' into 'develop'
OAuth scopes descriptions
Closes #3065
See merge request pleroma/pleroma!3848
|
2023-05-17 18:51:26 +00:00 |
|
Haelwenn
|
143676f58c
|
Merge branch 'tusooa/allow-lang' into 'develop'
Allow lang attribute
See merge request pleroma/pleroma!3882
|
2023-05-17 15:28:32 +00:00 |
|
tusooa
|
163e82bab1
|
Allow lang attribute
|
2023-05-09 19:27:32 -04:00 |
|
Haelwenn (lanodan) Monnier
|
fcd49e3985
|
User: Remove ap_enabled field
|
2023-05-05 11:11:26 +02:00 |
|
Haelwenn (lanodan) Monnier
|
2ee483ba41
|
Transmogrifier: Remove upgrade_user_from_ap_id
|
2023-05-05 11:11:26 +02:00 |
|
tusooa
|
85bdbb102e
|
Add extraction process for oauth scopes
|
2023-05-02 16:32:10 -04:00 |
|
tusooa
|
248f914e6e
|
Merge branch 'list-installed-frontends' into 'develop'
List installed frontend refs in admin API
See merge request pleroma/pleroma!3862
|
2023-04-27 02:56:19 +00:00 |
|
tusooa
|
ddf57596be
|
Merge branch 'bugfix/content-disposition' into 'develop'
UploadedMedia: Add missing disposition_type to Content-Disposition
Closes #3114
See merge request pleroma/pleroma!3873
|
2023-04-26 15:39:20 +00:00 |
|
duponin
|
b2dc9ad9d8
|
fix test after removing esshd/SSH feature
|
2023-04-23 10:47:17 +02:00 |
|