You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

ThibG cd4ec7cd74 Do not serve account actors at all in limited federation mode (#14800) ... * Do not serve account actors at all in limited federation mode When an account is fetched without a signature from an allowed instance, return an error. This isn't really an improvement in security, as the only information that was previously returned was required protocol-level info, and the only personal bit was the existence of the account. The existence of the account can still be checked by issuing a webfinger query, as those are accepted without signatures. However, this change makes it so that unallowed instances won't create account records on their end when they find a reference to an unknown account. The previous behavior of rendering a limited list of fields, instead of not rendering the actor at all, was in order to prevent situations in which two instances in Authorized Fetch mode or Limited Federation mode would fail to reach each other because resolving an account would require a signed query… from an account which can only be fetched with a signed query itself. However, this should now be fine as fetching accounts is done by signing on behalf of the special instance actor, which does not require any kind of valid signature to be fetched. * Fix tests		5 years ago
..
controllers	Do not serve account actors at all in limited federation mode (#14800)	5 years ago
fabricators	Add WebAuthn as an alternative 2FA method (#14466)	5 years ago
features	Add submit button to the top of preferences pages (#13068)	5 years ago
fixtures	Add noopener and/or noreferrer (#12202)	6 years ago
helpers	Add ability to filter audit log in admin UI (#13381)	5 years ago
lib	Refactor feed manager (#14761)	5 years ago
mailers	refactor: add email previews for WebAuthn emails (#14658)	5 years ago
models	Refactor how public and tag timelines are queried (#14728)	5 years ago
policies	Change admin UI for hashtags and add back whitelisted trends (#11490)	6 years ago
presenters	Admission-based registrations mode (#10250)	6 years ago
requests	Fix localization test failing due to order of locale definitions (#12393)	5 years ago
routing	Move create/destroy actions for api/v1/statuses to namespace (#3678)	8 years ago
serializers/activitypub	Fix account URI in UpdatePollSerializer (#11194)	6 years ago
services	Refactor how public and tag timelines are queried (#14728)	5 years ago
support	Fix base64-encoded file uploads not being possible (#12748)	5 years ago
validators	Improve email address validation (#14565)	5 years ago
views	Remove Atom feeds and old URLs in the form of `GET /:username/updates/:id` (#11247)	6 years ago
workers	Fix various warnings in rspec (#14729)	5 years ago
rails_helper.rb	Add WebAuthn as an alternative 2FA method (#14466)	5 years ago
spec_helper.rb	Move rspec examples to tmp dir (#12539)	5 years ago