You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

ThibG cd4ec7cd74 Do not serve account actors at all in limited federation mode (#14800) ... * Do not serve account actors at all in limited federation mode When an account is fetched without a signature from an allowed instance, return an error. This isn't really an improvement in security, as the only information that was previously returned was required protocol-level info, and the only personal bit was the existence of the account. The existence of the account can still be checked by issuing a webfinger query, as those are accepted without signatures. However, this change makes it so that unallowed instances won't create account records on their end when they find a reference to an unknown account. The previous behavior of rendering a limited list of fields, instead of not rendering the actor at all, was in order to prevent situations in which two instances in Authorized Fetch mode or Limited Federation mode would fail to reach each other because resolving an account would require a signed query… from an account which can only be fetched with a signed query itself. However, this should now be fine as fetching accounts is done by signing on behalf of the special instance actor, which does not require any kind of valid signature to be fetched. * Fix tests		5 years ago
..
activitypub	Change REST API to return empty data for suspended accounts (#14765)	5 years ago
admin	Improve email address validation (#14565)	5 years ago
api	Change REST API to return empty data for suspended accounts (#14765)	5 years ago
auth	Add WebAuthn as an alternative 2FA method (#14466)	5 years ago
concerns	Refactor settings controllers (#14767)	5 years ago
oauth	Refactor settings controllers (#14767)	5 years ago
settings	Refactor settings controllers (#14767)	5 years ago
well_known	Fix webfinger returning wrong status code on malformed or missing param (#13759)	5 years ago
about_controller.rb	Add table of contents to about page (#11885)	6 years ago
account_follow_controller.rb	Add specific rate limits for posting and following (#13172)	5 years ago
account_unfollow_controller.rb	Restful refactor of accounts/ routes (#2133)	8 years ago
accounts_controller.rb	Do not serve account actors at all in limited federation mode (#14800)	5 years ago
application_controller.rb	Fix RSS feeds not being cachable (#14368)	5 years ago
authorize_interactions_controller.rb	Add specific rate limits for posting and following (#13172)	5 years ago
custom_css_controller.rb	Fix redirecting non-functional accounts on public pages (#11978)	6 years ago
directories_controller.rb	Fix functional user requirements in whitelist mode (#14093)	5 years ago
emojis_controller.rb	Add (back) rails-level JSON caching (#11333)	6 years ago
filters_controller.rb	Fix missing authentication call in filters controller (#12746)	5 years ago
follower_accounts_controller.rb	Fix functional user requirements in whitelist mode (#14093)	5 years ago
following_accounts_controller.rb	Fix functional user requirements in whitelist mode (#14093)	5 years ago
home_controller.rb	Fix other sessions not being logged out on password change (#14252)	5 years ago
instance_actors_controller.rb	Add outbox attribute to instance actor (#14721)	5 years ago
intents_controller.rb	Refactor controllers for statuses, accounts, and more (#11249)	6 years ago
invites_controller.rb	Add invite comments (#10465)	6 years ago
manifests_controller.rb	Fix redirecting non-functional accounts on public pages (#11978)	6 years ago
media_controller.rb	Fix functional user requirements in whitelist mode (#14093)	5 years ago
media_proxy_controller.rb	Fix media attachments enumeration (#14254)	5 years ago
public_timelines_controller.rb	Fix blurhash and autoplay not working on public pages (#11585)	6 years ago
relationships_controller.rb	Change followers page to relationships page in admin UI (#12927)	5 years ago
remote_follow_controller.rb	Fix redirecting non-functional accounts on public pages (#11978)	6 years ago
remote_interaction_controller.rb	Fix functional user requirements in whitelist mode (#14093)	5 years ago
shares_controller.rb	Fix blurhash and autoplay not working on public pages (#11585)	6 years ago
statuses_controller.rb	Fix functional user requirements in whitelist mode (#14093)	5 years ago
tags_controller.rb	Refactor how public and tag timelines are queried (#14728)	5 years ago