summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-11-13media_proxy: CSP, content-dispositionhref
* Adds CSP headers to the media proxy endpoint * Sends `content-disposition: attachment; …` for non-image/video/audio content types The default list can be overwritten with `:media_proxy, :safe_content_types` in the configuration. * Also now appends the filename to the proxy URL (fixes some mobile apps, it was requested a while ago)
2018-11-13Merge branch 'security/cookie-hardening' into 'develop'lambda
Add __Host- prefix when secure flag is enabled See merge request pleroma/pleroma!446
2018-11-13Merge branch 'add-MIX_ENV-to-systemd-example' into 'develop'lambda
Add MIX_ENV=prod to systemd example file See merge request pleroma/pleroma!445
2018-11-13Merge branch 'whalebird' into 'develop'lambda
Add Whalebird as a client application in README See merge request pleroma/pleroma!447
2018-11-13Add __Host- prefix when secure flag is enabledshibayashi
2018-11-12Add MIX_ENV=prodshibayashi
2018-11-12Merge branch 'twitter-api-null-display-name' into 'develop'scarlett
Twitter API: Fall back to user.nickname if user has no name Closes #375 See merge request pleroma/pleroma!444
2018-11-12Twitter API: Add tests for nil names.scarlett
2018-11-13Add Whalebird as a client application in READMEAkiraFukushima
2018-11-12Twitter API: Fall back to user.nickname if user has no namescarlett
2018-11-12Merge branch 'feature/csp-plug' into 'develop'kaniini
migrate CSP management to CSPPlug See merge request pleroma/pleroma!441
2018-11-12sample config: chase http_security changeWilliam Pitcock
2018-11-12http security: allow referrer-policy to be configuredWilliam Pitcock
2018-11-12rename CSPPlug to HTTPSecurityPlug.William Pitcock
2018-11-11Merge branch 'update-readme' into 'develop'Haelwenn
Update README.md See merge request pleroma/pleroma!443
2018-11-11Update README.mdshibayashi
2018-11-11Merge branch 'fix-list-streaming' into 'develop'kaniini
Mastodon API: Fix list streaming See merge request pleroma/pleroma!442
2018-11-11Mastodon API: Fix list streamingKokaKiwi
2018-11-11config docs: typo fixWilliam Pitcock
2018-11-11tests: add tests for CSPPlugWilliam Pitcock
2018-11-11example configs: kill STS/CT headersWilliam Pitcock
2018-11-11csp plug: add support for certificate transparencyWilliam Pitcock
2018-11-11csp plug: add sts supportWilliam Pitcock
2018-11-11sample config: document how to make CSPPlug send STS headers (off by default ↵William Pitcock
to allow for SSL debugging)
2018-11-11config: add default parameters for CSPPlugWilliam Pitcock
2018-11-11example configs: remove obsolete CSP configurationWilliam Pitcock
2018-11-11plugs: add CSPPlugWilliam Pitcock
2018-11-11Merge branch 'bugfix/corsplug-config' into 'develop'kaniini
properly configure CORSPlug See merge request pleroma/pleroma!440
2018-11-11nginx example config: remove CORS headers, now managed by CORSPlug.William Pitcock
2018-11-11config: properly configure CORSPlug.William Pitcock
2018-11-11Merge branch 'bugfix/oauth-padding' into 'develop'kaniini
hotfix: oauth: fix token decode regression Closes #373 See merge request pleroma/pleroma!439
2018-11-11oauth: fix token decode regressionWilliam Pitcock
2018-11-10Merge branch 'bugfix/json-ld-object-sanitization' into 'develop'lambda
JSON-LD: object sanitization See merge request pleroma/pleroma!438
2018-11-10Merge branch 'feature/documentation' into 'develop'kaniini
Add ex_doc documentation to Pleroma See merge request pleroma/pleroma!416
2018-11-10tests: add test for internal data strippingWilliam Pitcock
2018-11-10activitypub: transmogrifier: sanitize internal representation details from ↵William Pitcock
outgoing objects this causes JSON-LD parsers to get upset and has also lead to developer confusion from outside projects which tried to parse our internal data. accordingly, it seems better to just remove it.
2018-11-10lib/mix/tasks: s/@doc/@moduledoc/Haelwenn (lanodan) Monnier
2018-11-10lib/mix/tasks/unsubscribe_user.ex: Fix syntax from bad line copyHaelwenn (lanodan) Monnier
2018-11-10lib/mix/tasks: Add remaining documentation for mix tasksHaelwenn (lanodan) Monnier
2018-11-10config/config.md: Add lines inspired/copied from CONFIGURATION.mdHaelwenn (lanodan) Monnier
2018-11-10README.md: Add note about config/config.mdHaelwenn (lanodan) Monnier
2018-11-10README.md: Put the systemd’s .service note to the relevant sectionHaelwenn (lanodan) Monnier
2018-11-10README.md: Add note for OpenRCHaelwenn (lanodan) Monnier
2018-11-10config/config.md: scope_options_enabled also addresses subjectHaelwenn (lanodan) Monnier
2018-11-10config/config.md: Fill all the blanksHaelwenn (lanodan) Monnier
2018-11-10config/config.md: Complete it [WIP]Haelwenn (lanodan) Monnier
2018-11-10config/config.md: CreateHaelwenn (lanodan) Monnier
2018-11-10Document the mix tasks in ex_doc insteadHaelwenn (lanodan) Monnier
2018-11-10Document mix tasksHaelwenn (lanodan) Monnier
2018-11-10Add ex_docHaelwenn (lanodan) Monnier