1067 Commits (62f60e86c281ae1cd0356a7630dbb76069e2ffde)

Author	SHA1	Message	Date
Eugen Rochko	11fe293e1b	Remove unused ActivityPub `@context` values depending on response (#10378) ... Fix #8078	7 years ago
Eugen Rochko	555c4e11ba	Add validations to admin settings (#10348) ... * Add validations to admin settings - Validate correct HTML markup - Validate presence of contact username & e-mail - Validate that all usernames are valid - Validate that enums have expected values * Fix code style issue * Fix tests	7 years ago
ThibG	66d9452092	Do not try fetching keys of unknown accounts on a Delete from them (#10326)	7 years ago
Eugen Rochko	9c4cbdbafb	Add Keybase integration (#10297) ... * create account_identity_proofs table * add endpoint for keybase to check local proofs * add async task to update validity and liveness of proofs from keybase * first pass keybase proof CRUD * second pass keybase proof creation * clean up proof list and add badges * add avatar url to keybase api * Always highlight the “Identity Proofs” navigation item when interacting with proofs. * Update translations. * Add profile URL. * Reorder proofs. * Add proofs to bio. * Update settings/identity_proofs front-end. * Use `link_to`. * Only encode query params if they exist. URLs without params had a trailing `?`. * Only show live proofs. * change valid to active in proof list and update liveness before displaying * minor fixes * add keybase config at well-known path * extremely naive feature flagging off the identity proof UI * fixes for rubocop * make identity proofs page resilient to potential keybase issues * normalize i18n * tweaks for brakeman * remove two unused translations * cleanup and add more localizations * make keybase_contacts an admin setting * fix ExternalProofService my_domain * use Addressable::URI in identity proofs * use active model serializer for keybase proof config * more cleanup of keybase proof config * rename proof is_valid and is_live to proof_valid and proof_live * cleanup * assorted tweaks for more robust communication with keybase * Clean up * Small fixes * Display verified identity identically to verified links * Clean up unused CSS * Add caching for Keybase avatar URLs * Remove keybase_contacts setting	7 years ago
ThibG	a20354a20b	Set and store report URIs (#10303) ... Fixes #10271	7 years ago
ThibG	5e38ef87a7	Fix reblogs privacy (#10302) ... * Fix reblogs privacy * Fix Announce processing specs	7 years ago
Eugen Rochko	1c113fd72d	Add relationship manager UI (#10268)	7 years ago
ysksn	782b622f5f	Add specs for action log helper (#9605) ... * Add specs for ActionLogHelper * Make some methods private methods below never referenced from outside of their module: - #linkable_log_target - #log_target_from_history	7 years ago
Eugen Rochko	1b167707c2	Fix language detection of non-latin alphabets even at few characters (#10276)	7 years ago
Eugen Rochko	51e154f5e8	Admission-based registrations mode (#10250) ... Fix #6856 Fix #6951	7 years ago
Eugen Rochko	65fffeac3f	Redesign landing page (#10232)	7 years ago
Aurélien Reeves	85537b0069	Squish username before validation (#10239) ... * Squish username before validation (#10101) Fix #10101 * Move before_validation hook to a private method Also add Unicode wite-spaces to the spec to support the use of squish over strip.	7 years ago
ThibG	c11dff5049	Reject existing Follows when suspending a remote account (#10230) ... * Reject existing Follows when suspending a remote account Partial fix to #10229 * Add tests	7 years ago
ThibG	3aaac4f134	Do not allow adding votes to expired polls (#10214) ... * Do not allow adding votes to expired polls * Only validate expires_at on create	7 years ago
Eugen Rochko	0a39c81dd8	Add test ensuring that unknown object types are rejected (#10166)	7 years ago
ThibG	833ffce2df	Store remote votes URI (#10158) ... * Store remote votes URI * Add spec for accepting remote votes * Make poll vote id generation work the same way as follows	7 years ago
Eugen Rochko	0e6998da3c	Add tests for ActivityPub poll processing (#10143)	7 years ago
Eugen Rochko	230a012f00	Add polls (#10111) ... * Add polls Fix #1629 * Add tests * Fixes * Change API for creating polls * Use name instead of content for votes * Remove poll validation for remote polls * Add polls to public pages * When updating the poll, update options just in case they were changed * Fix public pages showing both poll and other media	7 years ago
ThibG	9d3c6f1849	Improved remote thread fetching (#10106) ... * Fetch up to 5 replies when discovering a new remote status This is used for resolving threads downwards. The originating server must add a “replies” attributes with such replies for it to be useful. * Add some tests for ActivityPub::FetchRepliesWorker * Add specs for ActivityPub::FetchRepliesService * Serialize up to 5 public self-replies for ActivityPub notes * Add specs for ActivityPub::NoteSerializer * Move exponential backoff logic to a worker concern * Fetch first page of paginated collections when fetching thread replies * Add specs for paginated collections in replies * Move Note replies serialization to a first CollectionPage The collection isn't actually paginable yet as it has no id nor a `next` field. This may come in another PR. * Use pluck(:uri) instead of map(&:uri) to improve performances * Fix fetching replies when they are in a CollectionPage	7 years ago
Eugen Rochko	e7f20cc43f	Add type, limit, offset, min_id, max_id, account_id to search API (#10091) ... * Add type, limit, offset, min_id, max_id, account_id to search API Fix #8939 * Make the offset work on accounts and hashtags search as well * Assure brakeman we are not doing mass assignment here * Do not allow paginating unless a type is chosen * Fix search query and index id field on statuses instead of created_at	7 years ago
Eugen Rochko	1a1b8170bb	Fix Announce activities of unknown statuses not fetching those statuses (#10065) ... Regression from #9998	7 years ago
Eugen Rochko	147b4c2c3a	Add logging for rejected ActivityPub payloads and add tests (#10062)	7 years ago
Eugen Rochko	c417e8c198	Filter incoming Announce activities by relation to local activity (#10041) ... * Filter incoming Announce activities by relation to local activity Reject if announcer is not followed by local accounts, and is not from an enabled relay, and the object is not a local status Follow-up to #10005 * Fix tests	7 years ago
ThibG	6a5307a573	Alternative handling of private self-boosts (#9998) ... * When self-boosting, embed original toot into Announce serialization * Process unknown self-boosts from Announce object if it is more than an URI * Add some self-boost specs * Only serialize private toots in self-Announces	7 years ago
Franck Zoccolo	4f0322dcae	Add support for IPv6 only MXes in Email validation (#10009) ... * Add support for IPv6 only MXes * Fixed email validator tests	7 years ago
Eugen Rochko	016ad37bc8	Fix URL linkifier grabbing full-width spaces and quotations (#9997) ... Fix #9993 Fix #5654	7 years ago
Hinaloe	157d3af46c	Only URLs extract with pre-escaped text (#9991) ... * [test] add japanese hashtag testcase * Only URLs extract with pre-escaped text ( https://github.com/tootsuite/mastodon/issues/9989 )	7 years ago
Eugen Rochko	364f2ff9aa	Add featured hashtags to profiles (#9755) ... * Add hashtag filter to profiles GET /@:username/tagged/:hashtag GET /api/v1/accounts/:id/statuses?tagged=:hashtag * Display featured hashtags on public profile * Use separate model for featured tags * Update featured hashtag counters on-write * Limit featured tags to 10	7 years ago
Eugen Rochko	d14c276e58	Add option to overwrite imported data (#9962) ... * Add option to overwrite imported data Fix #7465 * Add import for domain blocks	7 years ago
Jakub Mendyk	6a5e3da6b0	Allow most kinds of characters in URL query (fixes #8408) (#8447) ... * Allow unicode characters in URL query strings Fixes #8408 * Alternative approach to unicode support in urls Adds PoC/idea to approch this problem.	7 years ago
ThibG	e2a5be6e9a	Prevent posting toots with media attachments from someone else (#9921)	7 years ago
ThibG	061feb63ed	Fix scheduled toot with media immediately creating a toot (#9894) ... * Add test for not persisting status when attaching media to scheduled toot * Prevent status used for validation from being persisted to the database Fixes #9893 Thanks to tateisu for the help investigating this.	7 years ago
ThibG	aeb124491d	Reject existing Follow in addition to sending a Block (#9811) ... Mastodon expects remote servers to remove follow relationships upon receiving a Block. However, the spec only evokes Block activities in a C2S context, never in a S2S context. This PR, in addition to federating the Block, explicitly sends a Reject for any affected follow relationship, which makes a bit more sense with regards to the spec.	7 years ago
Eugen Rochko	bc642ac24b	Redesign public hashtag page to use a masonry layout (#9822)	7 years ago
Moritz Heiber	ecf40d09ed	Disable Same-Site cookie implementation to fix SSO issues on WebKit browsers (#9819)	7 years ago
Renato "Lond" Cerqueira	5c5e14c816	Fix undefined method error in sidekiq (#9807) ... * Fix undefined method error in sidekiq Body can be not nil but still be empty, which causes a `NoMethodError: undefined method `[]' for nil:NilClass` further in the code. This checks for an empty body to avoid the issue. * Fix codeclimate issue	7 years ago
ysksn	c059999ab3	Add a spec for Admin::ActionLog (#9775)	7 years ago
ysksn	09c3c96607	Add specs for Admin::AccountAction (#9767)	7 years ago
ysksn	61ecda1575	Not to skip executable specs (#9753) ... * Not to skip executable specs * Combine specs Combine specs to one to reduce multiple slow http post.	7 years ago
Eugen Rochko	1c6588accc	Redesign admin instances area (#9645)	7 years ago
ysksn	9a38357111	Remove `pending` (#9752) ... Some specs have already been added.	7 years ago
ysksn	274109e9f3	Remove spec files (#9751) ... Nothing to test.	7 years ago
ysksn	88deca16ca	Add pending specs for jsonld helper (#9750) ... * Add specs for JsonLdHelper#first_of_value * Add specs for JsonLdHelper#supported_context?	7 years ago
Eugen Rochko	a49d43d112	Add scheduled statuses (#9706) ... Fix #340	7 years ago
ysksn	5efedb5d5e	Add specs for UrlValidator (#9699)	7 years ago
ysksn	19abf4ef0b	Add specs for UnreservedUsernameValidator (#9698) ... * Add specs for UnreservedUsernameValidator * Use instance variable	7 years ago
Eugen Rochko	66436d0895	Improve e-mail digest (#9689) ... - Reduce time-to-digest from 20 to 7 days - Fetch mentions starting from +1 day since last login - Fix case when last login is more recent than last e-mail - Do not render all mentions, only 40, but show number in subject - Do not send digest to moved accounts - Do send digest to silenced accounts	7 years ago
ThibG	70be301d69	Ensure blocked user unfollows blocker if Block/Undo Block are processed out of order (#9687) ... * Ensure blocked user unfollows blocker if Block/Undo Block are processed out of order * Add specs for Block causing unfollow and for out-of-order Block + Undo	7 years ago
ThibG	290932602b	Reduce usage of LD signatures (#9659) ... * Do not LDS-sign Follow, Accept, Reject, Undo, Block * Do not use LDS for Create activities of private toots * Minor cleanup * Ignore unsigned activities instead of misattributing them * Use status.distributable? instead of querying visibility directly	7 years ago
ysksn	fb08039de5	Add specs for FollowLimitValidator (#9655)	7 years ago
ysksn	05edec6917	Add specs for BlackListedEmailValidator (#9651) ... * Add specs for BlackListedEmailValidator * Use instance variable	7 years ago
ysksn	4725aeec9f	Add specs for DisallowedHashtagsValidator (#9653) ... In order to implement tests easier, `#select_tags` created.	7 years ago
Eugen Rochko	0f938ff29c	Add handler for Move activity (#9629)	7 years ago
ysksn	d01c840e14	Add specs for StatusPinValidator (#9648)	7 years ago
ysksn	ccb9c1b952	Add pending specs for StatusLengthValidator (#9647) ... * Add pending specs of StatusLengthValidator * Use instance variable	7 years ago
Eugen Rochko	5d2fc6de32	Add REST API for creating an account (#9572) ... * Add REST API for creating an account The method is available to apps with a token obtained via the client credentials grant. It creates a user and account records, as well as an access token for the app that initiated the request. The user is unconfirmed, and an e-mail is sent as usual. The method returns the access token, which the app should save for later. The REST API is not available to users with unconfirmed accounts, so the app must be smart to wait for the user to click a link in their e-mail inbox. The method is rate-limited by IP to 5 requests per 30 minutes. * Redirect users back to app from confirmation if they were created with an app * Add tests * Return 403 on the method if registrations are not open * Require agreement param to be true in the API when creating an account	7 years ago
ThibG	5f387995d9	Limit maximum visibility of local silenced users to unlisted (#9583) ... Fixes #9580	7 years ago
Eugen Rochko	3c033c4352	Add moderation warnings (#9519) ... * Add moderation warnings Replace individual routes for disabling, silencing, and suspending a user, as well as the report update route, with a unified account action controller that allows you to select an action (none, disable, silence, suspend) as well as whether it should generate an e-mail notification with optional custom text. That notification, with the optional custom text, is saved as a warning. Additionally, there are warning presets you can configure to save time when performing the above. * Use Account#local_username_and_domain	7 years ago
ysksn	eee2b05ea2	Add specs for CustomEmojiFilter (#9599)	7 years ago
ysksn	de3cecf37a	Add specs for AdminMailer (#9597)	7 years ago
ysksn	1bc78ec50e	Add specs for InstancePresenter (#9596)	7 years ago
ysksn	6a2d030c2f	Add specs for ReportNotePolicy (#9592)	7 years ago
ysksn	b93e317886	Add specs for policies (#9591) ... * Add spec for RelayPolicy * Add specs for SubscriptionPolicy * Add specs for SettingsPolicy * Add specs for TagPolicy * Add specs for ReportPolicy	7 years ago
ysksn	be9640bfc2	Add specs for UserPolicy (#9593)	7 years ago
ysksn	d649d84594	Add specs for InvitePolicy (#9589)	7 years ago
ysksn	44189c33d1	Add specs for EmailDomainBlockPolicy (#9586)	7 years ago
ysksn	08cb8a1ff3	Add specs for InstancePolicy (#9587)	7 years ago
ysksn	e181f99739	Add specs for DomainBlockPolicy (#9585)	7 years ago
ysksn	5088213f5e	Add specs for CustomEmojiPolicy (#9584)	7 years ago
ysksn	5d724aa129	Add specs for BackupPolicy (#9576)	7 years ago
ysksn	af56efdec5	Add specs for AccountPolicy (#9575)	7 years ago
ysksn	0a1ade4f02	Add specs for AccountModerationNotePolicy (#9571)	7 years ago
ysksn	102e4cfa32	Add specs for StatusPolicy (#9569)	7 years ago
ysksn	dd85700a3e	Add spec for AccountableConcern#log_action (#9559)	7 years ago
ThibG	e709b8da0d	Ignore low-confidence CharlockHolmes guesses when parsing link cards (#9510) ... * Add failing test for windows-1251 link cards * Ignore low-confidence CharlockHolmes guesses Fixes #9466 * Fix no method error when charlock holmes cannot detect charset	7 years ago
ysksn	0c80715235	Add spec for Api::V1::Timelines::DirectController (#9547)	7 years ago
ysksn	351938520d	Add specs for Api::V1::Instances::PeersController (#9546)	7 years ago
ysksn	2d871feb10	Add spec for Api::V1::EndorsementsController (#9543)	7 years ago
ysksn	3fa9615cb3	Add spec for Api::V1::Instances::ActivityController (#9545)	7 years ago
ysksn	a3dcbfddd6	Add specs for Accounts::PinsController (#9542)	7 years ago
ysksn	3c31c28605	Add spec for Admin::ActionLogsController#index (#9522)	7 years ago
ysksn	458e2b0c5b	Add specs for RemoteInteractionController (#9524)	7 years ago
ysksn	c1600a0f69	Add spec for Admin::DashboardController#index (#9523)	7 years ago
Sumit Khanna	769c2d2680	Error message for avatar image that's too large. #9204 (#9518) ... * Error message for avatar image that's too large. #9204 * Code climate/formatting * Removed avatar error message * Moved valid image dimentions check to update service * removed unnescessary begin block * code climate formatting * code climate indent fix	7 years ago
ysksn	795bac44fd	Add spec for Settings::ExportsController#create (#9512)	7 years ago
Adam Copp	7d00e4edbd	Make custom emoji domains case insensitive #9351 (#9474) ... * Make custom emoji domains case sensitive #9351 * Fixup style in downcase_domain to comply with codeclimate. * switch if! to unless * Don't use transactions, operate in batches. Also revert spurious schema change.	7 years ago
Eugen Rochko	dbb1ee269f	Improve e-mail MX validator and add tests (#9489)	7 years ago
ysksn	ed24bb2c3e	Add specs for activitypub collections controller (#9484) ... * Add specs for ActivityPub::CollectionsController#show * Raise ActiveRecord::RecordNotFound Raising ActiveRecord::NotFound raises NameError: uninitialized constant ActiveRecord::NotFound.	7 years ago
ysksn	6eae8f77af	Add spec for Admin::SuspentionsController#new (#9483)	7 years ago
ysksn	361818e931	Fix Admin::TagsController#unhide (#9481)	7 years ago
ysksn	ae3d2f446a	Add specs for Admin::InvitesController (#9471)	7 years ago
ysksn	dfd123d5b3	Remove pending spec (#9453)	7 years ago
ysksn	d3547fa005	Add specs for ActivityPub::InboxesController (#9456)	7 years ago
ysksn	88b3eed16f	Add specs for Admin::AccountModerationNotesHelper (#9455)	7 years ago
ysksn	57bb62d5cf	Remove pending spec (#9454) ... Since dots are not allowed in username, this spec is no longer needed.	7 years ago
ysksn	51cbd045da	Add specs for AccountTagStat model (#9452)	7 years ago
Eugen Rochko	73be8f38c1	Add profile directory (#9427) ... Fix #5578	7 years ago
ysksn	155cf12680	Remove pending spec (#9442) ... `#from_account` isn't defined.	7 years ago
ysksn	e2910dff12	Add spec for Identity.find_for_oauth (#9441)	7 years ago
ThibG	e88c6a5c3c	Fix thread depth computation in statuses_controller (#9426) ... * Add test that should currently fail * Fix depth computation (will still fail if statuses have been filtered out) * Fix handling of broken threads	7 years ago
ThibG	395615d9f3	Allow hyphens in the middle of remote user names (#9345) ... Fixes #9309 This only allows hyphens in the middle of a username, much like dots, although I don't have a compelling reason to do so other than keeping the changes minimal.	7 years ago
Eugen Rochko	73faadad28	Redesign admin accounts index (#9340) ... * Improve overview of accounts in admin UI - Display suspended status, role, last activity and IP prominently - Default to showing local accounts - Default to not showing suspended accounts * Remove unused strings * Fix tests * Allow filtering accounts by IP mask	7 years ago
valerauko	db9aea34de	Ensure replied-to is a status not a boost (#9129) ... * Ensure replied-to is a status not a boost * Consider case of not a reply * Add test case for replying to boost * Move reblog-reply resolution to model * Remove unnecessary comment	7 years ago
Eugen Rochko	0eaf6d7693	Sort self-replies to the top of descendants (#9320) ... Fix #6463	7 years ago
Eugen Rochko	fd8145d232	Fix connect timeout not being enforced (#9329) ... * Fix connect timeout not being enforced The loop was catching the timeout exception that should stop execution, so the next IP would no longer be within a timed block, which led to requests taking much longer than 10 seconds. * Use timeout on each IP attempt, but limit to 2 attempts * Fix code style issue * Do not break Request#perform if no block given * Update method stub in spec for Request * Move timeout inside the begin/rescue block * Use Resolv::DNS with timeout of 1 to get IP addresses * Update Request spec to stub Resolv::DNS instead of Addrinfo * Fix Resolve::DNS stubs in Request spec	7 years ago
valerauko	824497fbce	Ignore JSON-LD profile in mime type comparison (#9179) ... Ignore JSON-LD profile in mime type comparison	7 years ago
Eugen Rochko	d6b9a62e0a	Extract counters from accounts table to account_stats table (#9295)	7 years ago
Eugen Rochko	8069fd636b	Remove intermediary arrays when creating hash maps from results (#9291)	7 years ago
Eugen Rochko	6d59dfa15d	Optimize the process of following someone (#9220) ... * Eliminate extra accounts select query from FollowService * Optimistically update follow state in web UI and hide loading bar Fix #6205 * Asynchronize NotifyService in FollowService And fix failing test * Skip Webfinger resolve routine when called from FollowService if possible If an account is ActivityPub, then webfinger re-resolving is not necessary when called from FollowService. Improve options of ResolveAccountService	7 years ago
James Kiesel	4c03e05a4e	Allow joining several hashtags in a single column (#8904) ... * Nascent tag menu on frontend * Hook up frontend to search * Tag intersection backend first pass * Update yarnlock * WIP * Fix for tags not searching correctly * Make radio buttons function * Simplify radio buttons with modeOption * Better naming * Rearrange options * Add all/any/none functionality on backend * Small PR cleanup * Move to service from scope * Small cleanup, add proper service tests * Don't use send with user input :D * Set appropriate column header * Handle auto updating timeline * Fix up toggle function * Use tag value correctly * A bit more correct to use 'self' rather than 'all' in status scope * Fix some style issues * Fix more code style issues * Style select dropdown more better * Only use to_id'ed value to ensure no SQL injection * Revamp frontend to allow for multiple selects * Update backend / col header to account for more flexible tagging * Update brakeman ignore * Codeclimate suggestions * Fix presenter tag_url * Implement initial PR feedback * Handle additional tag streaming * CodeClimate tweak	7 years ago
Eugen Rochko	ce2ee68b64	Revert "Fix FetchAtomService content type handling (#9132)" (#9171) ... This reverts commit c36a4a1617.	7 years ago
valerauko	c36a4a1617	Fix FetchAtomService content type handling (#9132) ... * Add profile to json+ld in Accept It's required by the ActivityPub spec * Use headers['Content-type'] instead of mime_type mime_type strips the profile from the content type, but it's still available raw in the headers hash * Add test for ld+json with profile	7 years ago
ThibG	33a71e8f7c	Do not hide boost notifications from followed people with hidden boosts (#9147) ... * Do not hide boost notifications from followed people with hidden boosts Not displaying boosts from a followed user in the Home timeline and not having notifications when they reblog your own content are two very separate concerns, tying them together seem counter-intuitive and unwanted. * Update specs accordingly	7 years ago
Eugen Rochko	b40ea6d1d4	Bump sanitize from 4.6.6 to 5.0.0 (#9140)	7 years ago
takayamaki	33976c8ecc	fix: Execute PAM authentication tests on CircleCI (#9029) ... and use 'if' option of context block	7 years ago
Eugen Rochko	d5bfba3262	Do not test PAM authentication by default (#9027) ... * Do not test PAM authentication by default * Disable PAM tests if PAM is not enabled	7 years ago
Eugen Rochko	ddd30f331c	Improve support for aspects/circles (#8950) ... * Add silent column to mentions * Save silent mentions in ActivityPub Create handler and optimize it Move networking calls out of the database transaction * Add "limited" visibility level masked as "private" in the API Unlike DMs, limited statuses are pushed into home feeds. The access control rules between direct and limited statuses is almost the same, except for counter and conversation logic * Ensure silent column is non-null, add spec * Ensure filters don't check silent mentions for blocks/mutes As those are "this person is also allowed to see" rather than "this person is involved", therefore does not warrant filtering * Clean up code * Use Status#active_mentions to limit returned mentions * Fix code style issues * Use Status#active_mentions in Notification And remove stream_entry eager-loading from Notification	7 years ago
Eugen Rochko	21ad21cb50	Improve signature verification safeguards (#8959) ... * Downcase signed_headers string before building the signed string The HTTP Signatures draft does not mandate the “headers” field to be downcased, but mandates the header field names to be downcased in the signed string, which means that prior to this patch, Mastodon could fail to process signatures from some compliant clients. It also means that it would not actually check the Digest of non-compliant clients that wouldn't use a lowercased Digest field name. Thankfully, I don't know of any such client. * Revert "Remove dead code (#8919)" This reverts commit a00ce8c92c. * Restore time window checking, change it to 12 hours By checking the Date header, we can prevent replaying old vulnerable signatures. The focus is to prevent replaying old vulnerable requests from software that has been fixed in the meantime, so a somewhat long window should be fine and accounts for timezone misconfiguration. * Escape users' URLs when formatting them Fixes possible HTML injection * Escape all string interpolations in Formatter class Slightly improve performance by reducing class allocations from repeated Formatter#encode calls * Fix code style issues	7 years ago
ashleyhull-versent	f194857ac9	rubocop issues - Cleaning up (#8912) ... * cleanup pass * undo mistakes * fixed. * revert	7 years ago
ashleyhull-versent	2dba313100	Replace SVG asset with Custom mascot (#8766)	7 years ago
Eugen Rochko	774ac47373	Add conversations API (#8832) ... * Add conversations API * Add web UI for conversations * Add test for conversations API * Add tests for ConversationAccount * Improve web UI * Rename ConversationAccount to AccountConversation * Remove conversations on block and mute * Change last_status_id to be a denormalization of status_ids * Add optimistic locking	7 years ago
Jeong Arm	144d73730d	Leave unknown language as nil if account is remote (#8861) ... * Force use language detector if account is remote * Set unknown remote toot's language as nil	7 years ago
aus-social	0a4739c732	lint pass 2 (#8878) ... * Code quality pass * Typofix * Update applications_controller_spec.rb * Update applications_controller_spec.rb	7 years ago
Eugen Rochko	a46ab86adf	Limit the number of people that can be followed from one account (#8807) ... Configurable soft limit of 7,500, and above that, configurable ratio of 1.1 * followers, controlled by: - MAX_FOLLOWS_THRESHOLD - MAX_FOLLOWS_RATIO Fix #2311	7 years ago
Eugen Rochko	e645ae9561	Change admin accounts default sort to most recent (#8813)	7 years ago
Eugen Rochko	7fe137d2f7	Fix link verification for remote accounts (#8868)	7 years ago
aus-social	1f98eae1cf	Lint pass (#8876)	7 years ago
Eugen Rochko	f0fff3eb10	Support min_id-based pagination in REST API (#8736) ... * Allow min_id pagination in Feed#get * Add min_id pagination to home and list timeline APIs * Add min_id pagination to account statuses, public and tag APIs * Remove unused stub in reports API * Use min_id pagination in notifications, favourites, and fix order * Fix HomeFeed#from_database not using paginate_by_id	7 years ago
Eugen Rochko	3d7f68c273	Revert Font Awesome 5 upgrade (#8810) ... * Revert "Fix some icon names changed by the Font Awesome 5. (#8796)" This reverts commit 3f9ec3de82. * Revert "Migrate to font-awesome 5.0. (#8799)" This reverts commit 8bae14591b. * Revert "Fix some icons names, unavailable in fontawesome5 (free license). (#8792)" This reverts commit b9c727a945. * Revert "Update the icon name changed by the Font Awesome 5. (#8776)" This reverts commit 17af4d27da. * Revert "Add bot icon to bot avatars and migrate to newer version of Font Awesome (#8484)" This reverts commit 4b794e134d.	7 years ago
Naoki Kosaka	8bae14591b	Migrate to font-awesome 5.0. (#8799)	7 years ago
ThibG	c39183cc62	Refactor active_nav_class for use with multiple paths (#8757)	7 years ago
Eugen Rochko	f92f1ee80a	Support link verification with redirects (#8735) ... (e.g. URL shortener)	7 years ago
Yamagishi Kazutoshi	3da1cc7d5e	Fix failed profile verification when rel attribute including values other than me (#8733)	7 years ago
Eugen Rochko	f4d549d300	Redesign forms, verify link ownership with rel="me" (#8703) ... * Verify link ownership with rel="me" * Add explanation about verification to UI * Perform link verifications * Add click-to-copy widget for verification HTML * Redesign edit profile page * Redesign forms * Improve responsive design of settings pages * Restore landing page sign-up form * Fix typo * Support <link> tags, add spec * Fix links not being verified on first discovery and passive updates	7 years ago
luzpaz	40dd19be37	Misc. typos (#8694) ... Found via `codespell -q 3 --skip="./app/javascript/mastodon/locales,./config/locales"`	7 years ago
Eugen Rochko	2288d50a7b	Add force_login option to OAuth authorize page (#8655) ... * Add force_login option to OAuth authorize page For when a user needs to sign into an app from multiple accounts on the same server * When logging out from modal header, redirect back after re-login	7 years ago
Sorin Davidoi	6f3d934bc1	feat(cookies): Use the same-site attribute to lax (#8626) ... CSFR-prevention is already implemented but adding this doesn't hurt. A brief introduction to Same-Site cookies (and the difference between strict and lax) can be found at https://blog.mozilla.org/security/2018/04/24/same-site-cookies-in-firefox-60/ TLDR: We use lax since we want the cookies to be sent when the user navigates safely from an external site.	7 years ago
Eugen Rochko	c593d6df9c	Add preference for report notification e-mails, skip for duplicates (#8559) ... If an unresolved report for the same target account already exists, no new notification is generated	7 years ago
Renato "Lond" Cerqueira	fe56d26f7b	Fix autoplay issue with spoiler tag (#8540) ... Add tests to avoid similar issues in the future	7 years ago
Renato "Lond" Cerqueira	11658d8653	Add animate custom emoji param to embed pages (#8507) ... * Add animate custom emoji param to embed pages * Rename param, use it for avatars and gifs * Fix issues pointed by codeclimate and breaking test * Ignore brakeman warning	7 years ago
Renato "Lond" Cerqueira	5b2b493a90	Fix nil host in remotable (#8508) ... Host can be nil in urls like 'https:https://example.com/path/file.png'	7 years ago
sundevour	4bfd786550	formatter spec fixes & clarification (#8481) ... updates some "context" and "it" lines to have clearer explanations updates "context" lines to properly describe function input, and "it" lines to describe results	7 years ago
Eugen Rochko	5e1767173f	Display pending message on admin relays UI (#8494) ... * Add missing specs for relay accept/reject * Display pending message on admin relays UI	7 years ago
Jakub Mendyk	f3a12ddfd0	Make Api::V1::MutesController paginate properly (#8472) ... Fixes #8463	7 years ago
Eugen Rochko	22e46ebad8	Add theme identifier to body classes for easier custom CSS styling (#8439) ... Add forgotten custom CSS admin setting strings	7 years ago
Eugen Rochko	2f34b747b3	Allow mods to disable login, improve message when login disabled (#8329) ... * Allow moderators to disable/enable login * Instead of rejecting login, show forbidden error when login disabled Avoid confusion because when login is rejected, the message is that the account is not activated, which is wrong. * Fix tests	7 years ago
Jakub Mendyk	6cb3514d64	Add ability to change an instance default theme from the administration panel (#7092) (#8381) ... * Add default_settings class method to ScopedSettings ScopedSettings was extended to use value of unscoped setting instead of only using defaults set in config/settings.yml for selected settings. This adds possibility for admins to set default values of users' settings, for example default theme (as requested in #7092). * Add ability to change an instance default theme Closes #7092	7 years ago
Eugen Rochko	802cf6a4c5	Improve federated ID validation (#8372) ... * Fix URI not being sufficiently validated with prefetched JSON * Add additional id validation to OStatus documents, when possible	7 years ago
masarakki	4bdab203ac	exclude-other-silenced-accounts (#7528)	7 years ago
Eugen Rochko	2374a00c10	Add confirmation step to account suspensions (#8353) ... * Add confirmation page for suspensions * Suspension confirmation closes reports, linked from report UI * Fix tests	7 years ago