summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2023-06-21Prevent bypassing authorized fetch mode with a json fileSean King
2023-06-11Merge branch 'tusooa/3054-banned-delete' into 'develop'lain
Fix deleting banned users' statuses See merge request pleroma/pleroma!3889
2023-06-11B ForceMentionsInContent: Fix test, refactor.Lain Soykaf
2023-06-11Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into ↵Lain Soykaf
pleroma-double_mentions
2023-06-11Merge branch 'fix/metadata-tags' into 'develop'lain
static frontend: fix meta tags See merge request pleroma/pleroma!3885
2023-06-11Merge branch 'cleanup/ostatus-user-upgrade' into 'develop'lain
Cleanup OStatus-era user upgrades and ap_enabled indicator See merge request pleroma/pleroma!3880
2023-06-11Merge branch 'revert-mediaproxy-host-validation' into 'develop'feld
Revert MediaProxy Host header validation See merge request pleroma/pleroma!3902
2023-06-11Merge branch 'fep-fffd-url' into 'develop'lain
CommonFields: Use BareUri for :url Closes #3121 See merge request pleroma/pleroma!3884
2023-06-07Revert MediaProxy Host header validationMark Felder
Something is going wrong here even though the tests are correct.
2023-06-02B Preload: Make sure that the preloaded json is html safeLain Soykaf
2023-05-31Merge branch 'validate-host' into 'develop'Haelwenn
Validate Host header for MediaProxy and Uploads See merge request pleroma/pleroma!3896
2023-05-30Switch from serving a 400 to a 302Mark Felder
2023-05-29Add OnlyMedia Upload Filter to simplify restricting uploads to audio, image, ↵Mark Felder
and video types
2023-05-29Fix unused assignmentMark Felder
2023-05-29Validate Host header matches expected value before allowing access to UploadsMark Felder
2023-05-29Validate Host header matches expected value before allowing access to MediaProxyMark Felder
2023-05-29twitter card: handle case where image has no alt textfaried nawaz
2023-05-29fix meta tag for twitter cards and image attachmentsfaried nawaz
The name of the tag should be twitter:image, not twitter:player. Also, add twitter:image:alt meta tags.
2023-05-29add url to Metadata.build_tags callfaried nawaz
If static_fe is enabled, going to https://pleroma/notice/some-id results in <meta content="https://pleroma/users/someuser" property="og:url"> With this fix, it is <meta content="https://pleroma/notice/some-id" property="og:url"> Additionally, Pleroma.Web.Metadata.Providers.OpenGraph now generates meta tags for attachments in the post.
2023-05-26Merge branch 'release/2.5.2' into mergeback/2.5.2Haelwenn (lanodan) Monnier
2023-05-26Filter OEmbed HTML tagsMark Felder
2023-05-26Filter OEmbed HTML tagsMark Felder
2023-05-26Enforce unauth restrictions for public streaming endpointstusooa
2023-05-26Merge branch 'issue/3126' into 'develop'Haelwenn
MediaProxyController: Apply CSP sandbox See merge request pleroma/pleroma!3890
2023-05-26Merge branch 'tusooa/fix-object-test' into 'develop'Haelwenn
Fix ObjectTest See merge request pleroma/pleroma!3887
2023-05-26Merge branch 'tusooa/rework-refetch' into 'develop'Haelwenn
Make sure object refetching follows update rules See merge request pleroma/pleroma!3883
2023-05-26MediaProxyController: Apply CSP sandboxMark Felder
2023-05-26ForceMentionsInContent: fix double mentions for Mastodon/Misskey postsZero
The code checked for duplicates using "ap_id", but in Mastodon and Misskey the look like that: Mastodon: https://mastodon.example.com/users/roger Misskey: https:///misskey.example.com/users/104ab42f11 The fix is to also check for "uri", which is what will be in the "explicitly_mentioned_uris" list: Mastodon: https://mastodon.example.com/@roger Misskey: https://misskey.example.com/@roger
2023-05-25Fix deleting banned users' statusestusooa
2023-05-22Fix unused variabletusooa
2023-05-22Fix ObjectTesttusooa
2023-05-17Merge branch 'accept-tags-2.5' into 'develop'Haelwenn
TagValidator: Drop unrecognized Tag types Closes #2952 See merge request pleroma/pleroma!3823
2023-05-17Merge branch 'tusooa/3065-scopes' into 'develop'Haelwenn
OAuth scopes descriptions Closes #3065 See merge request pleroma/pleroma!3848
2023-05-17CommonFields: Use BareUri for :urlHaelwenn (lanodan) Monnier
Closes: https://git.pleroma.social/pleroma/pleroma/-/issues/3121
2023-05-17EctoType: Add BareUriHaelwenn (lanodan) Monnier
2023-05-09Fix build warningtusooa
2023-05-09Make sure object refetching follows update rulestusooa
2023-05-05User: Remove ap_enabled fieldHaelwenn (lanodan) Monnier
2023-05-05User: Remove ap_enabled?/1Haelwenn (lanodan) Monnier
2023-05-05ActivityPub: Mark fetch_and_prepare_user_from_ap_id/1 as privateHaelwenn (lanodan) Monnier
2023-05-05Federator: Stop using ap_enabled?/1Haelwenn (lanodan) Monnier
2023-05-05TransmogrifierWorker: Remove obsolete workerHaelwenn (lanodan) Monnier
2023-05-05Transmogrifier: Remove upgrade_user_from_ap_idHaelwenn (lanodan) Monnier
2023-05-05Publisher: Stop filtering via ap_enabled?/1Haelwenn (lanodan) Monnier
2023-05-05ActivityPub: Stop relying on ap_enabled and upgrade_user_from_ap_idHaelwenn (lanodan) Monnier
2023-05-05User: Stop relying on ap_enabledHaelwenn (lanodan) Monnier
2023-05-05AddRemoveValidator: Use User.fetch_by_ap_id instead of upgrade_user_from_ap_idHaelwenn (lanodan) Monnier
2023-05-02Make webui use translated scope descriptionstusooa
2023-05-02Add extraction process for oauth scopestusooa
2023-04-27Merge branch 'list-installed-frontends' into 'develop'tusooa
List installed frontend refs in admin API See merge request pleroma/pleroma!3862