7 commits

Author	SHA1	Message	Date
Sean King	a5a354a36e	Prevent bypassing authorized fetch mode with a json file	2023-06-21 23:10:56 -06:00
lain	e853cfe7c3	Revert "Merge branch 'copyright-bump' into 'develop'" ... This reverts merge request !3825	2023-01-02 20:38:50 +00:00
marcin mikołajczak	10886eeaa2	Bump copyright year ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-01-01 12:13:06 +01:00
Hélène	61254111e5	HttpSignaturePlug: accept standard (request-target) ... The (request-target) used by Pleroma is non-standard, but many HTTP signature implementations do it this way due to a misinterpretation of the draft 06 of HTTP signatures: "path" was interpreted as not having the query, though later examples show that it must be the absolute path with the query part of the URL as well. This behavior is kept to make sure most software (Pleroma itself, Mastodon, and probably others) do not break, but Pleroma now accepts signatures for a (request-target) containing the query, as expected by many HTTP signature libraries, and clarified in the draft 11 of HTTP signatures. Additionally, the new draft renamed (request-target) to @request-target. We now support both for incoming requests' signatures.	2022-08-18 17:01:34 +02:00
Sean King	17aa3644be	Copyright bump for 2022	2022-02-25 23:11:42 -07:00
Haelwenn (lanodan) Monnier	c4439c630f	Bump Copyright to 2021 ... grep -rl '# Copyright © .* Pleroma' * | xargs sed -i 's;Copyright © .* Pleroma .*;Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>;'	2021-01-13 07:49:50 +01:00
Alexander Strizhakov	abc3c7689b	HTTPSecurityPlug module name and filename	2020-10-13 16:43:55 +03:00

Renamed from lib/pleroma/web/plugs/http_signature.ex (Browse further)