summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-09-01activitypub: fix possibility of spoofing by containing remote objects to the ↵William Pitcock
same domain as their actor
2018-09-01Merge branch 'feature/disable-config-management' into 'develop'Haelwenn
config: add ability to disable Pleroma FE config management (closes #276) Closes #276 See merge request pleroma/pleroma!320
2018-09-01run `mix format`.William Pitcock
2018-09-01OAuth: Support /revoke endpoint for revoking tokensMartin Kühl
(for compatibility with Mastodon)
2018-09-01OAuth: Set `created_at` in token exchange responseMartin Kühl
(for compatibility with Mastodon)
2018-09-01AccountView: `sensitive` is supposed to be a boolean, not a stringMartin Kühl
2018-09-01config: add ability to disable Pleroma FE config management (closes #276)William Pitcock
2018-09-01Merge branch 'lanodan/code-dup_in_mastoapi_search' into 'develop'kaniini
Clean code duplication in MastoAPI search(v1/v2) See merge request pleroma/pleroma!316
2018-09-01Merge branch 'verify-credentials-default-scope' into 'develop'kaniini
Specify default scope in verify_credentials See merge request pleroma/pleroma!317
2018-08-31Specify default scope in verify_credentialsWill Pearson
Certain Mastodon/Pleroma front ends call verify_credentials to get the default scope of a new toot. Currently, Pleroma hardcodes this value to "public". This patch changes it to the user's default_scope value.
2018-09-01[Pleroma.Web.MastodonAPI.MastodonAPIController].search(2)?: Remove code ↵Haelwenn (lanodan) Monnier
duplication
2018-08-31add nil clause for Formatter.get_emoji/1 to return an empty resultThurloat
2018-08-31Merge branch 'revert-a26d5e6b' into 'develop'lambda
Revert "Merge branch 'feature/rich-text' into 'develop'" See merge request pleroma/pleroma!313
2018-08-31Revert "Merge branch 'feature/rich-text' into 'develop'"lambda
This reverts merge request !309
2018-08-31Merge branch 'bugfix/s3-configuration' into 'develop'kaniini
config: fix up defaults for s3 endpoint configuration See merge request pleroma/pleroma!312
2018-08-31config: fix up defaults for s3 endpoint configurationWilliam Pitcock
2018-08-31Merge branch 'update/pleroma-fe-20180831' into 'develop'kaniini
update pleroma frontend See merge request pleroma/pleroma!311
2018-08-31update pleroma frontendWilliam Pitcock
2018-08-31Merge branch 'update/pleroma-fe-config-20180831' into 'develop'kaniini
config: chase pleroma-fe updates from MR pleroma-fe!324. See merge request pleroma/pleroma!310
2018-08-31config: chase pleroma-fe updates from MR pleroma-fe!324.William Pitcock
2018-08-31Merge branch 'feature/rich-text' into 'develop'kaniini
rich text support See merge request pleroma/pleroma!309
2018-08-31tests: add tests for evil HTML filteringWilliam Pitcock
2018-08-31common api: add support for formatting messages outside of twitter-style ↵William Pitcock
plain text
2018-08-30Merge branch 'use-media-proxy-in-suggestions-api' into 'develop'kaniini
use media proxy for the suggestions api See merge request pleroma/pleroma!305
2018-08-30Merge branch 'backendhack' into 'develop'kaniini
Flexible Storage Backends See merge request pleroma/pleroma!304
2018-08-30increase uploader behaviour documentation accuracy.Thurloat
2018-08-30Add frame-ancestors 'none' to all configsshibayashi
2018-08-29Add backend failure handling with :ok | :error so the uploader can handle it.Thurloat
defaulting to :ok, since that's the currently level of error handling.
2018-08-29migrations: add index creation migration and recipients_to/cc removal migrationWilliam Pitcock
2018-08-29activity: drop recipients_to/recipients_cc fieldsWilliam Pitcock
2018-08-29migrations: drop filler migrationWilliam Pitcock
2018-08-29activitypub: use jsonb query for containment instead of ↵William Pitcock
recipients_to/recipients_cc.
2018-08-29installation/pleroma.nginx: Add 'always' to the security headers, so that ↵shibayashi
they are included regardless of the status code
2018-08-29Merge branch 'fix-mastodon-notifications-without-nickname' into 'develop'Haelwenn
Fix Mastodon API when actor's nickname is null See merge request pleroma/pleroma!308
2018-08-29Fix Mastodon API when actor's nickname is nullhref
2018-08-29streamer: contain list updates in the same way as we do with the database queryWilliam Pitcock
2018-08-29mastodon api: use bounded AP object graph query to enforce containment of ↵William Pitcock
private statuses
2018-08-29activitypub: allow querying the activity/object graph bounded to a specific ↵William Pitcock
to/cc set
2018-08-29test: add testcase proving lists system does not leak non-public postsWilliam Pitcock
2018-08-29migrations: add migration to fill in recipients_to/recipients_cc fieldsWilliam Pitcock
2018-08-29activity: add recipients_to and recipients_cc fieldsWilliam Pitcock
2018-08-28fix S3 ref in sample config to generate proper path.Thurloat
2018-08-28add a sample swift configThurloat
2018-08-28A hobbldey-working swift client.Thurloat
apparently, all elixir openstack libraries are trash luckily, the APIs are stupid easy.
2018-08-29installation/pleroma-apache.conf: Add TLS configuration and security headersshibayashi
2018-08-29installation/pleroma.vcl: Add HTTP security headersshibayashi
2018-08-29installation/caddyfile-pleroma.example: Add Content-Security-Policyshibayashi
2018-08-28works now, tested with profile photo upload on local backend.Thurloat
2018-08-28add the behaviour, work on actually making it work.Thurloat
2018-08-28Explicitly set 'http_only' to trueshibayashi
generated by cgit v1.2.3 (git 2.25.1) at 2025-07-11 21:58:52 +0000