summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-11-18Fix user updating from AP.lain
2018-11-18Mix format.lain
2018-11-18Fix most User tests.lain
2018-11-18Fix setting of keys.lain
2018-11-18Fix following locked users.lain
2018-11-18Fix note count update.lain
2018-11-18Fix follower count test.lain
2018-11-18Fix user deactivation test.lain
2018-11-18Fix blocking.lain
2018-11-18Formatting.lain
2018-11-18Fix follower count setting.lain
2018-11-18Fix note counting.lain
2018-11-18Fix User deactivation.lain
2018-11-18Add User.Info modulelain
To validate and mutate the user.info field.
2018-11-17Merge branch 'security/as2-object-render-hardening' into 'develop'lambda
activitypub: object view: avoid leaking private details See merge request pleroma/pleroma!463
2018-11-17activitypub: object view: avoid leaking private detailsWilliam Pitcock
2018-11-17Merge branch 'bugfix/notice-urls-should-return-objects' into 'develop'lambda
ostatus controller: respond with AS2 objects instead of activities to notice URIs Closes #289 and #383 See merge request pleroma/pleroma!462
2018-11-17ostatus controller: respond with AS2 objects instead of activities to notice ↵William Pitcock
URIs
2018-11-17Merge branch 'security/spoofing-hardening' into 'develop'lambda
security: spoofing hardening Closes #380, #381, and #382 See merge request pleroma/pleroma!461
2018-11-17tests: federator: fix formattingWilliam Pitcock
2018-11-17activitypub: transmogrifier: make deletes secureWilliam Pitcock
2018-11-17test: add sanity tests for federator handling of AP docsWilliam Pitcock
2018-11-17federator: return :ok or :error depending on if an AP doc was accepted or notWilliam Pitcock
2018-11-17federator: do origin containment when processing inbound messagesWilliam Pitcock
2018-11-17tests: add a test to verify the general fake direction protection works in ↵William Pitcock
all cases
2018-11-17tests: add a testcase for user collisionWilliam Pitcock
2018-11-17activitypub: user fetching: use fetch_and_contain_remote_object_from_id()William Pitcock
2018-11-17tests: add tests for contain_origin_from_id()William Pitcock
2018-11-17activitypub: factor out AP object fetching to it's own function and add ↵William Pitcock
ID-based containment
2018-11-17Merge branch 'security/actor-containment' into 'develop'lambda
security hotfix: actor containment See merge request pleroma/pleroma!460
2018-11-17tests: add a second spoofing variantWilliam Pitcock
2018-11-17activitypub: fetch_object_from_id(): prefer `actor` over `attributedTo` to ↵William Pitcock
avoid spoofing
2018-11-17test: fix more test defectsWilliam Pitcock
2018-11-17tests: add additional spoofing testsWilliam Pitcock
2018-11-17transmogrifier tests: fix defective spoofing testWilliam Pitcock
2018-11-17test: httpoison mock: add second spoofing activity testWilliam Pitcock
2018-11-17Merge branch 'feature/uploader-mdii' into 'develop'kaniini
Feature / MDII Uploader See merge request pleroma/pleroma!454
2018-11-17fallbacking into local uploaderhakabahitoyo
2018-11-17better config readinghakabahitoyo
2018-11-16Merge branch 'bugfix/dm-timeline-scope' into 'develop'kaniini
TwitterAPI: Fix dm_timeline displaying only half of the conversation. See merge request pleroma/pleroma!457
2018-11-16TwitterAPI: Fix dm_timeline displaying only half of the conversation.lain
2018-11-16Merge branch 'feature/pleromafe-usersearch' into 'develop'lambda
Add Twitter / Pleroma API user search See merge request pleroma/pleroma!452
2018-11-16Merge branch 'bugfix/csp-remove-form-action' into 'develop'kaniini
http security: remove form-action from CSP definitions Closes #379 See merge request pleroma/pleroma!456
2018-11-16http security: remove form-action from CSP definitionsWilliam Pitcock
2018-11-16Add better test for user search functionlity.lain
2018-11-16Merge branch 'fix/test' into 'develop'lambda
Reset http security settings to fix plug test See merge request pleroma/pleroma!455
2018-11-17Reset http security settings to fix plug testAkiraFukushima
2018-11-16better confighakabahitoyo
2018-11-16better extension detectionhakabahitoyo
2018-11-15debughakabahitoyo