mastodon

Author	SHA1	Message	Date
David Leadbeater	69378eac99	Don't allow URLs that contain non-normalized paths to be verified (#20999 ) * Don't allow URLs that contain non-normalized paths to be verified This stops things like https://example.com/otheruser/../realuser where "/otheruser" appears to be the verified URL, but the actual URL being verified is "/realuser" due to the "/../". Also fix a test to use 'https', so it is testing the right thing, now that since #20304 https is required. * missing do	2 years ago
Emily Strickland	96f51e593f	Guard against error extracting `body` from URL (#20428 ) If `Nokogiri::HTML(value).at_xpath('//body')` fails to find the `body` element, it will return `nil`. We can guard against that with an early return. Avoids calling `children` on `Nilclass` in those cases.	2 years ago
Eugen Rochko	c6c7c6223d	Change verification to only work for https links (#20304 ) Fix #20242	2 years ago
Eugen Rochko	9965a23b04	Change link verification to ignore IDN domains (#20295 ) Fix #3833	2 years ago
Eugen Rochko	e98833748e	Fix being able to spoof link verification (#20217 ) - Change verification to happen in `default` queue - Change verification worker to only be queued if there's something to do - Add `link` tags from metadata fields to page header of profiles	2 years ago