4 Commits (dev)

Author	SHA1	Message	Date
Shlee	11183eed2f	Merge pull request #7837 from pixelfed/fix/flag-string-object ... Normalize string object in inbound Flag activities	1 week ago
Ashley	96b645980b	Gate federated likes on local post visibility ... A remote Like on a non-draft/archived local status was recorded after only domain-block and user-block checks, with no scope or audience check. A remote actor who knew the permalink could like a private, followers-only, or direct post, bumping likes_count and notifying the owner. Mirror the local favourite rule for a non-owner: private is allowed only when the liker follows the owner, direct is denied, and public/unlisted are untouched. Remote-origin statuses are not gated. Verified red to green with the new regression test: before the guard, the private non-follower and both direct cases recorded a Like (3 failures); after, they are rejected while public and private-follower still record.	1 week ago
Ashley	61b5073fbb	Normalize string object in inbound Flag activities	1 week ago
Ashley	edb5d4bfb4	fix: honor story can_reply consent on federated replies	1 week ago