summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2018-09-02Merge branch 'security/emoji-xss' into 'develop'kaniini
2018-09-02formatter: don't add XSS emojiWilliam Pitcock
2018-09-01Merge branch 'security/activitypub-spoofing' into 'develop'kaniini
2018-09-01transmogrifier: fix peertube/plume actor handlingWilliam Pitcock
2018-09-01tests: add regression testsWilliam Pitcock
2018-09-01activitypub: fix possibility of spoofing by containing remote objects to the ...William Pitcock
2018-09-01Merge branch 'feature/disable-config-management' into 'develop'Haelwenn
2018-09-01run `mix format`.William Pitcock
2018-09-01OAuth: Support /revoke endpoint for revoking tokensMartin Kühl
2018-09-01OAuth: Set `created_at` in token exchange responseMartin Kühl
2018-09-01AccountView: `sensitive` is supposed to be a boolean, not a stringMartin Kühl
2018-09-01config: add ability to disable Pleroma FE config management (closes #276)William Pitcock
2018-09-01Merge branch 'lanodan/code-dup_in_mastoapi_search' into 'develop'kaniini
2018-09-01Merge branch 'verify-credentials-default-scope' into 'develop'kaniini
2018-08-31Specify default scope in verify_credentialsWill Pearson
2018-09-01[Pleroma.Web.MastodonAPI.MastodonAPIController].search(2)?: Remove code dupli...Haelwenn (lanodan) Monnier
2018-08-31add nil clause for Formatter.get_emoji/1 to return an empty resultThurloat
2018-08-31Merge branch 'revert-a26d5e6b' into 'develop'lambda
2018-08-31Revert "Merge branch 'feature/rich-text' into 'develop'"lambda
2018-08-31Merge branch 'bugfix/s3-configuration' into 'develop'kaniini
2018-08-31config: fix up defaults for s3 endpoint configurationWilliam Pitcock
2018-08-31Merge branch 'update/pleroma-fe-20180831' into 'develop'kaniini
2018-08-31update pleroma frontendWilliam Pitcock
2018-08-31Merge branch 'update/pleroma-fe-config-20180831' into 'develop'kaniini
2018-08-31config: chase pleroma-fe updates from MR pleroma-fe!324.William Pitcock
2018-08-31Merge branch 'feature/rich-text' into 'develop'kaniini
2018-08-31tests: add tests for evil HTML filteringWilliam Pitcock
2018-08-31common api: add support for formatting messages outside of twitter-style plai...William Pitcock
2018-08-30Merge branch 'use-media-proxy-in-suggestions-api' into 'develop'kaniini
2018-08-30Merge branch 'backendhack' into 'develop'kaniini
2018-08-30increase uploader behaviour documentation accuracy.Thurloat
2018-08-30Add frame-ancestors 'none' to all configsshibayashi
2018-08-29Add backend failure handling with :ok | :error so the uploader can handle it.Thurloat
2018-08-29migrations: add index creation migration and recipients_to/cc removal migrationWilliam Pitcock
2018-08-29activity: drop recipients_to/recipients_cc fieldsWilliam Pitcock
2018-08-29migrations: drop filler migrationWilliam Pitcock
2018-08-29activitypub: use jsonb query for containment instead of recipients_to/recipie...William Pitcock
2018-08-29installation/pleroma.nginx: Add 'always' to the security headers, so that the...shibayashi
2018-08-29Merge branch 'fix-mastodon-notifications-without-nickname' into 'develop'Haelwenn
2018-08-29Fix Mastodon API when actor's nickname is nullhref
2018-08-29streamer: contain list updates in the same way as we do with the database queryWilliam Pitcock
2018-08-29mastodon api: use bounded AP object graph query to enforce containment of pri...William Pitcock
2018-08-29activitypub: allow querying the activity/object graph bounded to a specific t...William Pitcock
2018-08-29test: add testcase proving lists system does not leak non-public postsWilliam Pitcock
2018-08-29migrations: add migration to fill in recipients_to/recipients_cc fieldsWilliam Pitcock
2018-08-29activity: add recipients_to and recipients_cc fieldsWilliam Pitcock
2018-08-28fix S3 ref in sample config to generate proper path.Thurloat
2018-08-28add a sample swift configThurloat
2018-08-28A hobbldey-working swift client.Thurloat
2018-08-29installation/pleroma-apache.conf: Add TLS configuration and security headersshibayashi