Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-11-13 | media_proxy: CSP, content-disposition | href | |
* Adds CSP headers to the media proxy endpoint * Sends `content-disposition: attachment; …` for non-image/video/audio content types The default list can be overwritten with `:media_proxy, :safe_content_types` in the configuration. * Also now appends the filename to the proxy URL (fixes some mobile apps, it was requested a while ago) | |||
2018-11-13 | Merge branch 'security/cookie-hardening' into 'develop' | lambda | |
Add __Host- prefix when secure flag is enabled See merge request pleroma/pleroma!446 | |||
2018-11-13 | Merge branch 'add-MIX_ENV-to-systemd-example' into 'develop' | lambda | |
Add MIX_ENV=prod to systemd example file See merge request pleroma/pleroma!445 | |||
2018-11-13 | Merge branch 'whalebird' into 'develop' | lambda | |
Add Whalebird as a client application in README See merge request pleroma/pleroma!447 | |||
2018-11-13 | Add __Host- prefix when secure flag is enabled | shibayashi | |
2018-11-12 | Add MIX_ENV=prod | shibayashi | |
2018-11-12 | Merge branch 'twitter-api-null-display-name' into 'develop' | scarlett | |
Twitter API: Fall back to user.nickname if user has no name Closes #375 See merge request pleroma/pleroma!444 | |||
2018-11-12 | Twitter API: Add tests for nil names. | scarlett | |
2018-11-13 | Add Whalebird as a client application in README | AkiraFukushima | |
2018-11-12 | Twitter API: Fall back to user.nickname if user has no name | scarlett | |
2018-11-12 | Merge branch 'feature/csp-plug' into 'develop' | kaniini | |
migrate CSP management to CSPPlug See merge request pleroma/pleroma!441 | |||
2018-11-12 | sample config: chase http_security change | William Pitcock | |
2018-11-12 | http security: allow referrer-policy to be configured | William Pitcock | |
2018-11-12 | rename CSPPlug to HTTPSecurityPlug. | William Pitcock | |
2018-11-11 | Merge branch 'update-readme' into 'develop' | Haelwenn | |
Update README.md See merge request pleroma/pleroma!443 | |||
2018-11-11 | Update README.md | shibayashi | |
2018-11-11 | Merge branch 'fix-list-streaming' into 'develop' | kaniini | |
Mastodon API: Fix list streaming See merge request pleroma/pleroma!442 | |||
2018-11-11 | Mastodon API: Fix list streaming | KokaKiwi | |
2018-11-11 | config docs: typo fix | William Pitcock | |
2018-11-11 | tests: add tests for CSPPlug | William Pitcock | |
2018-11-11 | example configs: kill STS/CT headers | William Pitcock | |
2018-11-11 | csp plug: add support for certificate transparency | William Pitcock | |
2018-11-11 | csp plug: add sts support | William Pitcock | |
2018-11-11 | sample config: document how to make CSPPlug send STS headers (off by default ↵ | William Pitcock | |
to allow for SSL debugging) | |||
2018-11-11 | config: add default parameters for CSPPlug | William Pitcock | |
2018-11-11 | example configs: remove obsolete CSP configuration | William Pitcock | |
2018-11-11 | plugs: add CSPPlug | William Pitcock | |
2018-11-11 | Merge branch 'bugfix/corsplug-config' into 'develop' | kaniini | |
properly configure CORSPlug See merge request pleroma/pleroma!440 | |||
2018-11-11 | nginx example config: remove CORS headers, now managed by CORSPlug. | William Pitcock | |
2018-11-11 | config: properly configure CORSPlug. | William Pitcock | |
2018-11-11 | Merge branch 'bugfix/oauth-padding' into 'develop' | kaniini | |
hotfix: oauth: fix token decode regression Closes #373 See merge request pleroma/pleroma!439 | |||
2018-11-11 | oauth: fix token decode regression | William Pitcock | |
2018-11-10 | Merge branch 'bugfix/json-ld-object-sanitization' into 'develop' | lambda | |
JSON-LD: object sanitization See merge request pleroma/pleroma!438 | |||
2018-11-10 | Merge branch 'feature/documentation' into 'develop' | kaniini | |
Add ex_doc documentation to Pleroma See merge request pleroma/pleroma!416 | |||
2018-11-10 | tests: add test for internal data stripping | William Pitcock | |
2018-11-10 | activitypub: transmogrifier: sanitize internal representation details from ↵ | William Pitcock | |
outgoing objects this causes JSON-LD parsers to get upset and has also lead to developer confusion from outside projects which tried to parse our internal data. accordingly, it seems better to just remove it. | |||
2018-11-10 | lib/mix/tasks: s/@doc/@moduledoc/ | Haelwenn (lanodan) Monnier | |
2018-11-10 | lib/mix/tasks/unsubscribe_user.ex: Fix syntax from bad line copy | Haelwenn (lanodan) Monnier | |
2018-11-10 | lib/mix/tasks: Add remaining documentation for mix tasks | Haelwenn (lanodan) Monnier | |
2018-11-10 | config/config.md: Add lines inspired/copied from CONFIGURATION.md | Haelwenn (lanodan) Monnier | |
2018-11-10 | README.md: Add note about config/config.md | Haelwenn (lanodan) Monnier | |
2018-11-10 | README.md: Put the systemd’s .service note to the relevant section | Haelwenn (lanodan) Monnier | |
2018-11-10 | README.md: Add note for OpenRC | Haelwenn (lanodan) Monnier | |
2018-11-10 | config/config.md: scope_options_enabled also addresses subject | Haelwenn (lanodan) Monnier | |
2018-11-10 | config/config.md: Fill all the blanks | Haelwenn (lanodan) Monnier | |
2018-11-10 | config/config.md: Complete it [WIP] | Haelwenn (lanodan) Monnier | |
2018-11-10 | config/config.md: Create | Haelwenn (lanodan) Monnier | |
2018-11-10 | Document the mix tasks in ex_doc instead | Haelwenn (lanodan) Monnier | |
2018-11-10 | Document mix tasks | Haelwenn (lanodan) Monnier | |
2018-11-10 | Add ex_doc | Haelwenn (lanodan) Monnier | |