mastodon

Commit Graph

Author	SHA1	Message	Date
Matt Jankowski	f1003b2560	Enable "zero monkey patching" mode in RSpec (#31614 )	4 months ago
Christian Schmidt	9d0cafd06b	Check Content-Length in ResponseWithLimitAdapter (#31285 )	5 months ago
Matt Jankowski	b2c5b20ef2	Fix `RSpec/AnyInstance` cop (#27810 )	1 year ago
Claire	94893cf24f	Merge pull request from GHSA-hcqf-fw2r-52g4 * Revert "Fix request URL normalisation for bare domain and 8-bit characters (#26285)" This reverts commit `8891d8945d`. * Revert "Do not normalize URL before fetching it (#26219)" This reverts commit `fd284311e7`.	1 year ago
Christian Schmidt	8891d8945d	Fix request URL normalisation for bare domain and 8-bit characters (#26285 )	1 year ago
Christian Schmidt	fd284311e7	Do not normalize URL before fetching it (#26219 )	1 year ago
Matt Jankowski	05f9e39b32	Fix `RSpec/VerifiedDoubles` cop (#25469 )	2 years ago
Matt Jankowski	c42591356d	Fix `RSpec/DescribedClass` cop (#25104 )	2 years ago
Nick Schonning	2c3c734bcc	Autofix Rubocop Style/SymbolProc (#23742 )	2 years ago
Nick Schonning	65ba0d92ef	Enable Rubocop RSpec/NotToNot (#23723 )	2 years ago
Nick Schonning	6d42820e5d	Autofix Rubocop Lint/AmbiguousOperator (#23680 )	2 years ago
Markus Unterwaditzer	0c689b9d01	fix: allow verification when page size exceeds 1MB (using HTML5 parser) (#22879 ) * fix: allow verification when page size exceeds 1MB Truncates the page after 1MB instead Closes #15316 * switch to HTML5 parser, fix rubocop errors * undo rubocop fixes Co-authored-by: Chris Zubak-Skees <chriszs@gmail.com>	2 years ago
luzpaz	4aa3b9bd01	Fix typos (#18604 ) * Fix typos Found via `codespell -q 3 -S ./CHANGELOG.md,./AUTHORS.md,./config/locales,./app/javascript/mastodon/locales -L ba,keypair,medias,pixelx,ro` * Follow-up typo fix	2 years ago
Eugen Rochko	fd8145d232	Fix connect timeout not being enforced (#9329 ) * Fix connect timeout not being enforced The loop was catching the timeout exception that should stop execution, so the next IP would no longer be within a timed block, which led to requests taking much longer than 10 seconds. * Use timeout on each IP attempt, but limit to 2 attempts * Fix code style issue * Do not break Request#perform if no block given * Update method stub in spec for Request * Move timeout inside the begin/rescue block * Use Resolv::DNS with timeout of 1 to get IP addresses * Update Request spec to stub Resolv::DNS instead of Addrinfo * Fix Resolve::DNS stubs in Request spec	6 years ago
aus-social	1f98eae1cf	Lint pass (#8876 )	6 years ago
Akihiko Odaki	40e5d2303b	Validate HTTP response length while receiving (#6891 ) to_s method of HTTP::Response keeps blocking while it receives the whole content, no matter how it is big. This means it may waste time to receive unacceptably large files. It may also consume memory and disk in the process. This solves the inefficency by checking response length while receiving.	7 years ago
Akihiko Odaki	54b273bf99	Close http connection in perform method of Request class (#6889 ) HTTP connections must be explicitly closed in many cases, and letting perform method close connections makes its callers less redundant and prevent them from forgetting to close connections.	7 years ago
Rey Tucker	36b5703796	request: in the event of failure, try other IPs (#6761 ) (#6813 ) * request: in the event of failure, try other IPs (#6761) In the case where a name has multiple A/AAAA records, we should try subsequent records instead of immediately failing when we have a failure on the first IP address. This significantly improves delivery success when there are network connectivity problems affecting only IPv4 or IPv6. * fix method call style * request_spec: adjust test case to use Addrinfo * request: Request/open: move private addr check to within begin/rescue * request_spec: add case to test failover, fix exception check * Double Addrinfo.foreach so that it correctly yields instances	7 years ago
Akihiko Odaki	2e8a492e88	Raise Mastodon::HostValidationError when host for HTTP request is private (#6410 )	7 years ago
Eugen Rochko	1618b68bfa	HTTP signatures (#4146 ) * Add Request class with HTTP signature generator Spec: https://tools.ietf.org/html/draft-cavage-http-signatures-06 * Add HTTP signature verification concern * Add test for SignatureVerification concern * Add basic test for Request class * Make PuSH subscribe/unsubscribe requests use new Request class Accidentally fix lease_seconds not being set and sent properly, and change the new minimum subscription duration to 1 day * Make all PuSH workers use new Request class * Make Salmon sender use new Request class * Make FetchLinkService use new Request class * Make FetchAtomService use the new Request class * Make Remotable use the new Request class * Make ResolveRemoteAccountService use the new Request class * Add more tests * Allow +-30 seconds window for signed request to remain valid * Disable time window validation for signed requests, restore 7 days as PuSH subscription duration (which was previous default due to a bug)	8 years ago

20 Commits (50737ffe972af16a1d37b7ca3514930e67f70f88)