mastodon

Commit Graph

Author	SHA1	Message	Date
Matt Jankowski	f9100743ec	Add `Api::ErrorHandling` concern for api/base controller (#29574 )	1 year ago
Claire	7efc33b909	Move HTTP Signature parsing code to its own class (#28932 )	1 year ago
Claire	1726085db5	Merge pull request from GHSA-3fjr-858r-92rw * Fix insufficient origin validation * Bump version to 4.3.0-alpha.1	1 year ago
Eugen Rochko	b19ae521b7	Add confirmation when redirecting logged-out requests to permalink (#27792 ) Co-authored-by: Claire <claire.github-309c@sitedethib.com>	1 year ago
Claire	3593ee2e36	Add rate-limit of TOTP authentication attempts at controller level (#28801 )	1 year ago
Jean Boussier	5a6d533c53	Enable Rails 7.1 Marshalling format (#28609 )	1 year ago
Claire	092bb8a27a	Fix Mastodon not correctly processing HTTP Signatures with query strings (#28476 )	1 year ago
Claire	963354978a	Add `Account#unavailable?` and `Account#permanently_unavailable?` aliases (#28053 )	1 year ago
Matt Jankowski	1f1c75bba5	File cleanup/organization in `controllers/concerns` (#27846 )	1 year ago
Matt Jankowski	291dc04e67	Remove un-needed `action` and `template` options to `render` in controllers (#28022 )	1 year ago
Matt Jankowski	d562fb8459	Specs for minimal CSP policy in `Api::` controllers (#27845 )	1 year ago
Ricardo Trindade	33f8c1c5eb	Remove version check from update cache_concern.rb (#27592 )	1 year ago
Claire	379115e601	Add SELF_DESTRUCT env variable to process self-destructions in the background (#26439 )	1 year ago
Matt Jankowski	d4c2dca874	Fix haml-lint `InstanceVariables` rule for auth/sessions/two_factor/o… (#27372 )	1 year ago
Claire	40ba6e119b	Fix Vary headers not being set on some redirects (#27272 )	1 year ago
Matt Jankowski	340f1a68be	Simplify instance presenter view access (#26046 )	1 year ago
CSDUMMI	9a70cac9de	Fix #26849 by adding the domain of the current SSO provider to the form-action CSP (#26857 )	2 years ago
Claire	09ec9c6aa5	Downgrade signature verification debug logging from `warn` to `debug` (#26812 )	2 years ago
Claire	25bf640629	Add debug logging on signature verification failure (#26637 )	2 years ago
Claire	8b37dd2c86	Fix Content Security Policy sometimes unnecessarily allowing hCaptcha scripts (#26388 )	2 years ago
CSDUMMI	120f5802c0	Add direct link to the Single-Sign On provider if there is only one sign up method available (#26083 )	2 years ago
Emelia Smith	e258b4cb64	Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252 )	2 years ago
Matt Jankowski	2e1391fdd2	Fix `Naming/MemoizedInstanceVariableName` cop (#25928 )	2 years ago
Matt Jankowski	5134fc65e2	Fix `Naming/AccessorMethodName` cop (#25924 )	2 years ago
Eugen Rochko	39110d1d0a	Fix CAPTCHA page not following design pattern of sign-up flow (#25395 )	2 years ago
Claire	bec6a1cad4	Add hCaptcha support (#25019 )	2 years ago
Nick Schonning	d5a185d721	Autofix Rubocop Style/CaseLikeIf (#23756 )	2 years ago
Matt Jankowski	668a19a2f3	Fix Performance/DeletePrefix cop (#24796 )	2 years ago
Claire	b0bf6216e6	Fix /api/v1/instance/domain_blocks being unconditionally cached (#24662 )	2 years ago
Claire	276c39361b	Fix anonymous visitors getting a session cookie on first visit (#24584 )	2 years ago
Eugen Rochko	6084461cd0	Change unauthenticated responses to be cached in REST API (#24348 )	2 years ago
Claire	58a1b2e330	Fix caching logic with regards to Accept-Language, Cookie, and Signature (#24604 )	2 years ago
Eugen Rochko	e98c86050a	Refactor `Cache-Control` and `Vary` definitions (#24347 )	2 years ago
Matt Jankowski	0663803348	Move link header setting to after_action (#24251 )	2 years ago
Claire	2626097869	Fix Rails cache namespace being overriden with `v2` for cached statuses (#24202 )	2 years ago
Jean byroot Boussier	160f38f03d	Workaround the ActiveRecord / Marshal serialization bug on Ruby 3.2 (#24142 ) Co-authored-by: Jean Boussier <jean.boussier@gmail.com>	2 years ago
Nick Schonning	25d36b6edd	Autofix Rubocop Style/RedundantArgument (#23798 )	2 years ago
Nick Schonning	717683d1c3	Autofix Rubocop remaining Layout rules (#23679 )	2 years ago
Nick Schonning	aef0051fd0	Enable Rubocop HTTP status rules (#23717 )	2 years ago
Nick Schonning	2177daeae9	Autofix Rubocop Style/RedundantBegin (#23703 )	2 years ago
Nick Schonning	a6f77aa28a	Autofix Rubocop Lint/AmbiguousOperatorPrecedence (#23681 )	2 years ago
Nick Schonning	2e652aa81c	Apply Rubocop Performance/RedundantSplitRegexpArgument (#23443 ) * Apply Rubocop Performance/RedundantSplitRegexpArgument * Update app/controllers/concerns/signature_verification.rb	2 years ago
Claire	68dcbcb7bf	Add more specific error messages to HTTP signature verification (#21617 ) * Return specific error on failure to parse Date header * Add error message when preferredUsername is not set * Change error report to be JSON and include more details * Change error report to differentiate unknown account and failed refresh * Add tests	2 years ago
Claire	fcc4c9b34a	Change domain block CSV parsing to be more robust and handle more lists (#21470 ) * Change domain block CSV parsing to be more robust and handle more lists * Add some tests * Improve domain block import validation and reporting	2 years ago
Claire	aefefc74c4	Change referrer-policy to no-referrer application-wide (#23014 )	2 years ago
Claire	42f9693d00	Fix PermalinkRedirector not applying to users with moved accounts (#22497 ) Fixes #22262	2 years ago
David Vega	1b5d207131	Fix single name variables on controller folder (#20092 ) Co-authored-by: petrokoriakin1 <116151189+petrokoriakin1@users.noreply.github.com> Co-authored-by: petrokoriakin1 <116151189+petrokoriakin1@users.noreply.github.com> Co-authored-by: Effy Elden <effy@effy.space>	2 years ago
lenore gilbert	c373148b3d	Support for import/export of instance-level domain blocks/allows for 4.x w/ additional fixes (#20597 ) * Allow import/export of instance-level domain blocks/allows (#1754) * Allow import/export of instance-level domain blocks/allows. Fixes #15095 * Pacify circleci * Address simple code review feedback * Add headers to exported CSV * Extract common import/export functionality to AdminExportControllerConcern * Add additional fields to instance-blocked domain export * Address review feedback * Split instance domain block/allow import/export into separate pages/controllers * Address code review feedback * Pacify DeepSource * Work around Paperclip::HasAttachmentFile for Rails 6 * Fix deprecated API warning in export tests * Remove after_commit workaround (cherry picked from commit `94e98864e3`) * Add confirmation page when importing blocked domains (#1773) * Move glitch-soc-specific strings to glitch-soc-specific locale files * Add confirmation page when importing blocked domains (cherry picked from commit `b91196f4b7`) * Fix authorization check in domain blocks controller (cherry picked from commit `7527937758`) * Fix error strings for domain blocks and email-domain blocks Corrected issue with non-error message used for Mastodon:NotPermittedError in Domain Blocks Corrected issue Domain Blocks using the Email Domain Blocks message on ActionContoller::ParameterMissing Corrected issue with Email Domain Blocks using the not_permitted string from "custom emojii's" * Ran i18n-tasks normalize to address test failure * Removed unused admin.export_domain_blocks.not_permitted string Removing unused string as indicated by Check i18n * Fix tests (cherry picked from commit `9094c2f52c`) * Fix domain block export not exporting blocks with only media rejection (cherry picked from commit `26ff48ee48`) * Fix various issues with domain block import - stop using Paperclip for processing domain allow/block imports - stop leaving temporary files - better error handling - assume CSV files are UTF-8-encoded (cherry picked from commit cad824d8f501b95377e4f0a957e5a00d517a1902) Co-authored-by: Levi Bard <taktaktaktaktaktaktaktaktaktak@gmail.com> Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2 years ago
Claire	86f6631d28	Remove dead code and refactor status threading code (#20357 ) * Remove dead code * Remove unneeded/broken parameters and refactor descendant computation	2 years ago
Eugen Rochko	839f893168	Change public accounts pages to mount the web UI (#19319 ) * Change public accounts pages to mount the web UI * Fix handling of remote usernames in routes - When logged in, serve web app - When logged out, redirect to permalink - Fix `app-body` class not being set sometimes due to name conflict * Fix missing `multiColumn` prop * Fix failing test * Use `discoverable` attribute to control indexing directives * Fix `<ColumnLoading />` not using `multiColumn` * Add `noindex` to accounts in REST API * Change noindex directive to not be rendered by default before a route is mounted * Add loading indicator for detailed status in web UI * Fix missing indicator appearing while account is loading in web UI	2 years ago

1 2 3 4

151 Commits (30483d618f94ed85ac90c78ae24fc40349891208)