summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2023-05-31Move websocket config for Shoutbox to the EndpointMark Felder
This is the modern way of configuring it
2023-05-31Fix deprecated calls to get_flash/2Mark Felder
2023-05-31Merge branch 'validate-host' into 'develop'Haelwenn
Validate Host header for MediaProxy and Uploads See merge request pleroma/pleroma!3896
2023-05-30Switch from serving a 400 to a 302Mark Felder
2023-05-29Add OnlyMedia Upload Filter to simplify restricting uploads to audio, image, ↵Mark Felder
and video types
2023-05-29Fix unused assignmentMark Felder
2023-05-29Validate Host header matches expected value before allowing access to UploadsMark Felder
2023-05-29Validate Host header matches expected value before allowing access to MediaProxyMark Felder
2023-05-29twitter card: handle case where image has no alt textfaried nawaz
2023-05-29fix meta tag for twitter cards and image attachmentsfaried nawaz
The name of the tag should be twitter:image, not twitter:player. Also, add twitter:image:alt meta tags.
2023-05-29add url to Metadata.build_tags callfaried nawaz
If static_fe is enabled, going to https://pleroma/notice/some-id results in <meta content="https://pleroma/users/someuser" property="og:url"> With this fix, it is <meta content="https://pleroma/notice/some-id" property="og:url"> Additionally, Pleroma.Web.Metadata.Providers.OpenGraph now generates meta tags for attachments in the post.
2023-05-26Merge branch 'release/2.5.2' into mergeback/2.5.2Haelwenn (lanodan) Monnier
2023-05-26Filter OEmbed HTML tagsMark Felder
2023-05-26Filter OEmbed HTML tagsMark Felder
2023-05-26Enforce unauth restrictions for public streaming endpointstusooa
2023-05-26Merge branch 'issue/3126' into 'develop'Haelwenn
MediaProxyController: Apply CSP sandbox See merge request pleroma/pleroma!3890
2023-05-26Merge branch 'tusooa/fix-object-test' into 'develop'Haelwenn
Fix ObjectTest See merge request pleroma/pleroma!3887
2023-05-26Merge branch 'tusooa/rework-refetch' into 'develop'Haelwenn
Make sure object refetching follows update rules See merge request pleroma/pleroma!3883
2023-05-26MediaProxyController: Apply CSP sandboxMark Felder
2023-05-26ForceMentionsInContent: fix double mentions for Mastodon/Misskey postsZero
The code checked for duplicates using "ap_id", but in Mastodon and Misskey the look like that: Mastodon: https://mastodon.example.com/users/roger Misskey: https:///misskey.example.com/users/104ab42f11 The fix is to also check for "uri", which is what will be in the "explicitly_mentioned_uris" list: Mastodon: https://mastodon.example.com/@roger Misskey: https://misskey.example.com/@roger
2023-05-25Fix deleting banned users' statusestusooa
2023-05-25Show more informative errors when profile exceeds char limitstusooa
2023-05-22Fix unused variabletusooa
2023-05-22Fix ObjectTesttusooa
2023-05-17Merge branch 'accept-tags-2.5' into 'develop'Haelwenn
TagValidator: Drop unrecognized Tag types Closes #2952 See merge request pleroma/pleroma!3823
2023-05-17Merge branch 'tusooa/3065-scopes' into 'develop'Haelwenn
OAuth scopes descriptions Closes #3065 See merge request pleroma/pleroma!3848
2023-05-17CommonFields: Use BareUri for :urlHaelwenn (lanodan) Monnier
Closes: https://git.pleroma.social/pleroma/pleroma/-/issues/3121
2023-05-17EctoType: Add BareUriHaelwenn (lanodan) Monnier
2023-05-09Fix build warningtusooa
2023-05-09Make sure object refetching follows update rulestusooa
2023-05-07keep the websocket url for all modesHenry Jameson
2023-05-07reduce redundant reduntancy reductionHenry Jameson
2023-05-07fix whitespaceHenry Jameson
2023-05-07conditionally set csp depnding on media-proxy stateHenry Jameson
2023-05-05User: Remove ap_enabled fieldHaelwenn (lanodan) Monnier
2023-05-05User: Remove ap_enabled?/1Haelwenn (lanodan) Monnier
2023-05-05ActivityPub: Mark fetch_and_prepare_user_from_ap_id/1 as privateHaelwenn (lanodan) Monnier
2023-05-05Federator: Stop using ap_enabled?/1Haelwenn (lanodan) Monnier
2023-05-05TransmogrifierWorker: Remove obsolete workerHaelwenn (lanodan) Monnier
2023-05-05Transmogrifier: Remove upgrade_user_from_ap_idHaelwenn (lanodan) Monnier
2023-05-05Publisher: Stop filtering via ap_enabled?/1Haelwenn (lanodan) Monnier
2023-05-05ActivityPub: Stop relying on ap_enabled and upgrade_user_from_ap_idHaelwenn (lanodan) Monnier
2023-05-05User: Stop relying on ap_enabledHaelwenn (lanodan) Monnier
2023-05-05AddRemoveValidator: Use User.fetch_by_ap_id instead of upgrade_user_from_ap_idHaelwenn (lanodan) Monnier
2023-05-02Make webui use translated scope descriptionstusooa
2023-05-02Add extraction process for oauth scopestusooa
2023-04-28allow https: so that flash works across instances without need for media proxyHJ
2023-04-27Merge branch 'list-installed-frontends' into 'develop'tusooa
List installed frontend refs in admin API See merge request pleroma/pleroma!3862
2023-04-26Merge branch 'bugfix/content-disposition' into 'develop'tusooa
UploadedMedia: Add missing disposition_type to Content-Disposition Closes #3114 See merge request pleroma/pleroma!3873
2023-04-23Remove SSH/BBS feature from coreduponin
And link to sshocial, the replacement client for this removed feature