summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2023-09-07Update InstanceView.featuresmarcin mikołajczak
2023-09-03CommonAPI: Prevent users from accessing media of other usersMint
2023-08-30Make lint happytusooa
2023-08-16Merge branch 'csp-flash' into 'develop'Haelwenn
2023-08-16Apply lanodan's suggestion(s) to 1 file(s)Haelwenn
2023-08-11InstanceView: Add common_information functionmarcin mikołajczak
2023-08-11Implement api/v2/instance routemarcin mikołajczak
2023-08-05Completely disable xml entity resolutionmae
2023-08-04Prevent XML parser from loading external entitiesMae
2023-08-04instance gen: Reduce permissions of pleroma directories and config filesHaelwenn (lanodan) Monnier
2023-08-04Config: Restrict permissions of OTP config fileHaelwenn (lanodan) Monnier
2023-08-04Resolve information disclosure vulnerability through emoji pack archive downl...Mark Felder
2023-08-03Merge branch 'tusooa/3154-attachment-type-check' into 'develop'Haelwenn
2023-07-28cleaner ecto query to handle restrict_unauthenticated for activitiesFaried Nawaz
2023-07-28status context: perform visibility check on activities around a statusfaried nawaz
2023-07-18Restrict attachments to only uploaded files onlytusooa
2023-07-17Merge branch '2023-06-deps-update' into 'develop'Haelwenn
2023-07-07Make regex-to-string descriptor reusabletusooa
2023-07-07Fix edge casestusooa
2023-07-07Make EmojiPolicy aware of custom emoji reactionstusooa
2023-07-07Improve config examples for EmojiPolicytusooa
2023-07-07Move emoji_policy.ex to the right placetusooa
2023-07-07EmojiPolicy: Implement delisttusooa
2023-07-07EmojiPolicy: implement remove by shortcodetusooa
2023-07-07Add emoji policy to remove emojis matching certain urlstusooa
2023-07-04Deprecate audio scrobblingHaelwenn (lanodan) Monnier
2023-07-02Merge branch 'tusooa/3131-handle-report-from-deactivated-user' into 'develop'Haelwenn
2023-07-02Fix handling report from a deactivated usertusooa
2023-07-02Fix user fetch completely broken if featured collection is not in a supported...tusooa
2023-07-01Merge branch 'bugfix/full-revert-media-host-validation' into 'develop'tusooa
2023-06-27Merge branch 'instance-nodeinfo-metadata' into 'develop'developHaelwenn
2023-06-27Merge branch 'tusooa/3119-bio-update' into 'develop'Haelwenn
2023-06-27Merge branch 'from/upstream-develop/tusooa/backup-status' into 'develop'Haelwenn
2023-06-27router: Fix usage of globsHaelwenn (lanodan) Monnier
2023-06-27endpoint: Use custom Multipart module for dynamic configurationHaelwenn (lanodan) Monnier
2023-06-22Merge Revert "Merge branch 'validate-host' into 'develop'"Haelwenn (lanodan) Monnier
2023-06-21Prevent bypassing authorized fetch mode with a json fileSean King
2023-06-11Merge branch 'tusooa/3054-banned-delete' into 'develop'lain
2023-06-11B ForceMentionsInContent: Fix test, refactor.Lain Soykaf
2023-06-11Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into pleroma-dou...Lain Soykaf
2023-06-11Merge branch 'fix/metadata-tags' into 'develop'lain
2023-06-11Merge branch 'cleanup/ostatus-user-upgrade' into 'develop'lain
2023-06-11Merge branch 'revert-mediaproxy-host-validation' into 'develop'feld
2023-06-11Merge branch 'fep-fffd-url' into 'develop'lain
2023-06-07Revert MediaProxy Host header validationMark Felder
2023-06-03Phoenix.Router.routes/1 is the public function we are meant to be using hereMark Felder
2023-06-02B Preload: Make sure that the preloaded json is html safeLain Soykaf
2023-05-31Fix compile warningMark Felder
2023-05-31Phoenix.Socket.Transport.force_ssl/4 no longer existsMark Felder
2023-05-31Clean up Plug.Parsers.MULTIPART deprecation warningsMark Felder