Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-09-03 | Include list id in StatusView | marcin mikołajczak | |
Signed-off-by: marcin mikołajczak <git@mkljczk.pl> | |||
2024-09-02 | Merge branch 'scrubbers-allow-mention-hashtag' into 'develop' | marcin mikołajczak | |
scrubbers/default: Allow "mention hashtag" classes used by Mastodon See merge request pleroma/pleroma!4245 | |||
2024-09-02 | scrubbers/default: Allow "mention hashtag" classes used by Mastodon | marcin mikołajczak | |
Signed-off-by: marcin mikołajczak <git@mkljczk.pl> | |||
2024-09-01 | Merge branch 'oauth-app-spam' into 'develop' | feld | |
Fix OAuth app spam See merge request pleroma/pleroma!4244 | |||
2024-09-01 | Merge branch 'drop-unknown-deletes' into 'develop' | feld | |
Drop unwanted activities from unknown actors See merge request pleroma/pleroma!4236 | |||
2024-09-01 | Support OAuth App updating the website URL | Mark Felder | |
2024-09-01 | Test that app scopes can be updated | Mark Felder | |
2024-09-01 | Prevent OAuth App flow from creating duplicate entries | Mark Felder | |
2024-08-30 | Update changelog | Mark Felder | |
2024-08-30 | InboxGuardPlug: Add early rejection of unknown activity types | Mark Felder | |
2024-08-30 | Add recognized activity types to a constant and use it in the test | Mark Felder | |
2024-08-30 | Update allowed activity types from strangers | feld | |
Move is emitted from the old account EmojiReact is ~ Like Announced TBD | |||
2024-08-29 | Update changelog | Mark Felder | |
2024-08-29 | Test more types we do not want to receive from strangers | Mark Felder | |
2024-08-29 | Fix test title to be more specific as it has a broader but incorrect meaning | Mark Felder | |
2024-08-29 | Remove unnecessary error match in ReceiverWorker | Mark Felder | |
2024-08-29 | Change relay inbox response when not federating to a 403 for consistency | Mark Felder | |
2024-08-29 | Convert to an Plug called InboxGuard | Mark Felder | |
2024-08-29 | Formatting | Mark Felder | |
2024-08-29 | Switch test to the inbox | Mark Felder | |
2024-08-29 | Use Pleroma.Object.Containment.get_actor/1 to reliably find the actor of an ↵ | feld | |
incoming activity or object | |||
2024-08-29 | Move the check to the inbox | Mark Felder | |
2024-08-29 | Revert unintentional change | Mark Felder | |
2024-08-29 | Drop incoming Delete activities from unknown actors | Mark Felder | |
2024-08-29 | Merge branch 'todo-fixes' into 'develop' | feld | |
Clean up Elixir 1.13 TODOs See merge request pleroma/pleroma!4233 | |||
2024-08-29 | Merge remote-tracking branch 'origin/develop' into todo-fixes | Mark Felder | |
2024-08-29 | Merge branch 'pleroma-http-stream' into 'develop' | feld | |
Pleroma.HTTP: support streaming response bodies See merge request pleroma/pleroma!4239 | |||
2024-08-29 | Rich Media: add stream byte counting as an extra protection against ↵ | Mark Felder | |
malicious URLs | |||
2024-08-28 | Changelog | Mark Felder | |
2024-08-28 | Update comments, remove solved TODO | Mark Felder | |
2024-08-28 | Add an AdapterHelper for Finch so we can support streaming request bodies | Mark Felder | |
2024-08-28 | Merge branch 'user-refresh-oban-tests' into 'develop' | feld | |
ReceiverWorker: tests, improvements See merge request pleroma/pleroma!4241 | |||
2024-08-28 | Move user active check into Federator.perform/1 | Mark Felder | |
2024-08-28 | Merge branch 'docs-fix' into 'develop' | marcin mikołajczak | |
Correct response in AdminAPI docs See merge request pleroma/pleroma!4240 | |||
2024-08-28 | Changelog update | Mark Felder | |
2024-08-28 | More error annotations | Mark Felder | |
2024-08-28 | Add back one of the duplicate checks to fix a test, document where it comes from | Mark Felder | |
2024-08-28 | :validate_object is not a real error returned from anywhere | Mark Felder | |
2024-08-28 | Annotate error cases | Mark Felder | |
2024-08-28 | ReceiverWorker job canceled due to deleted object | Mark Felder | |
2024-08-28 | Cancel ReceiverWorker jobs if the user account has been disabled / deactivated | Mark Felder | |
2024-08-28 | Add test for origin containment failures | Mark Felder | |
2024-08-28 | Changelog | Mark Felder | |
2024-08-28 | Simplify test, move data into a json fixture | Mark Felder | |
By removing the inReplyTo, tags, and cc we can simplify the test and it still passes signature validation | |||
2024-08-28 | Cancel if the User fetch resulted in a 410 | Mark Felder | |
2024-08-28 | Add test confirming cancellation for activity by a deleted user | Mark Felder | |
2024-08-28 | ReceiverWorker: cancel job if user fetch is forbidden | Mark Felder | |
An instance block with authenticated fetch being required can cause this as we couldn't get the user to find their public key to verify the signature. Commonly observed if someone boosts/Announces a post from an instance that blocked you. | |||
2024-08-28 | Correct response in AdminAPI docs | marcin mikołajczak | |
Signed-off-by: marcin mikołajczak <git@mkljczk.pl> | |||
2024-08-27 | This error is not returned by Tesla | Mark Felder | |
Upstream has a bug filed for this as they aren't handling this error internally, so it was raising | |||
2024-08-27 | Fix incorrect identifier for the with statement | Mark Felder | |