Shlee
|
ca4ad83255
|
Merge pull request #7147 from shleeable/chore/lint-session-tests
Apply Pint lint fixes to session test files
|
2 weeks ago |
Your Name
|
eb9bd11303
|
Apply Pint lint fixes to session test files
|
2 weeks ago |
Shlee
|
46fb9613e3
|
Merge pull request #7146 from shleeable/fix/2fa-checkpoint-throttle
Rate limit and audit-log 2FA checkpoint verification
|
2 weeks ago |
Your Name
|
8cebb24c04
|
Rate limit and audit-log 2FA checkpoint verification
|
2 weeks ago |
Shlee
|
0ebe1f8fb1
|
Merge pull request #7145 from shleeable/fix/media-blocklist-check-before-store
Check media blocklist before storing uploads to prevent orphaned files
|
2 weeks ago |
Your Name
|
ec6827bae2
|
Check media blocklist before storing uploads to prevent orphaned files
|
2 weeks ago |
Shlee
|
c3e01f86cf
|
Merge pull request #7144 from shleeable/fix/curated-register-email-escape
Escape user-provided content in curated register admin emails
|
2 weeks ago |
Your Name
|
4df40cb772
|
Escape user-provided content in curated register admin emails
|
2 weeks ago |
Shlee
|
cecdad5b53
|
Merge pull request #7143 from shleeable/fix/search-controller-pgsql-ilike
Use ILIKE for case-insensitive search on PostgreSQL
|
2 weeks ago |
Your Name
|
613cf413de
|
Use ILIKE for case-insensitive search on PostgreSQL
|
2 weeks ago |
Shlee
|
173abef5c5
|
Merge pull request #7142 from shleeable/fix/reblog-duplicate-dispatch
Only dispatch SharePipeline for newly-created reblogs
|
2 weeks ago |
Your Name
|
d190ba7b66
|
Only dispatch SharePipeline for newly-created reblogs
|
2 weeks ago |
Shlee
|
0fc121b685
|
Merge pull request #7134 from shleeable/fix/storyfetch-ssrf
Route StoryFetch outbound requests through SSRF-hardened fetch service
|
2 weeks ago |
Shlee
|
58c83a2c6b
|
Merge pull request #7141 from shleeable/fix/import-instagram-missing-profile
Drop Instagram import job when profile is missing instead of crashing
|
2 weeks ago |
Your Name
|
922d7f766e
|
Drop Instagram import job when profile is missing instead of crashing
|
2 weeks ago |
Shlee
|
ee64de9df4
|
Merge pull request #7140 from shleeable/fix/user-account-delete-user-agent
Send Pixelfed User-Agent on federated account deletion deliveries
|
2 weeks ago |
Shlee
|
a5cbea834f
|
Merge pull request #7138 from shleeable/fix/oob-authorize-omitted-redirect-uri
Detect OOB oauth client when redirect_uri omitted on authorize
|
2 weeks ago |
Shlee
|
ae31ed8e66
|
Merge pull request #7137 from shleeable/fix/story-remote-expiry-cache
Invalidate latest-story cache on remote story expiry and null-guard l…
|
2 weeks ago |
Shlee
|
0e1a5686c3
|
Merge pull request #7139 from shleeable/fix/email-update-unique-ignore-self
Ignore own row when validating email update uniqueness
|
2 weeks ago |
Your Name
|
327348be02
|
Send Pixelfed User-Agent on federated account deletion deliveries
|
2 weeks ago |
Your Name
|
53ad34b321
|
Ignore own row when validating email update uniqueness
|
2 weeks ago |
Your Name
|
462b4bc0da
|
Detect OOB oauth client when redirect_uri omitted on authorize
|
2 weeks ago |
Your Name
|
9850aac676
|
Invalidate latest-story cache on remote story expiry and null-guard latest()
|
2 weeks ago |
Shlee
|
9c5be0e271
|
Merge pull request #7136 from shleeable/fix/custom-filter-rate-limit-ttl
Fix custom filter rate-limit counter never expiring
|
2 weeks ago |
Your Name
|
63e3c95fae
|
Fix custom filter rate-limit counter never expiring
|
2 weeks ago |
Shlee
|
3dae966b52
|
Merge pull request #7135 from shleeable/fix/register-form-max-users-guard
Fix registration form redirecting when max_users is falsy
|
2 weeks ago |
Your Name
|
afcb68c183
|
Fix registration form redirecting when max_users is falsy
|
2 weeks ago |
Your Name
|
9e84ad261d
|
Route StoryFetch outbound requests through SSRF-hardened fetch service
|
2 weeks ago |
Shlee
|
daf83fd564
|
Merge pull request #7132 from shleeable/fix/pat-renew-kill-switch
Enforce pat_enabled kill-switch on personal access token renew
|
2 weeks ago |
Shlee
|
a546c4982a
|
Merge pull request #7133 from shleeable/fix/remote-auth-domain-compatible-guard
Fix isDomainCompatible throwing on non-json beagle response
|
2 weeks ago |
Your Name
|
d51cf4ccc9
|
Fix isDomainCompatible throwing on non-json beagle response
|
2 weeks ago |
Your Name
|
d2b11a71b3
|
Enforce pat_enabled kill-switch on personal access token renew
|
2 weeks ago |
Shlee
|
13a441af93
|
Merge pull request #7131 from shleeable/fix/login-activity-groupby
Fix login activity groupBy returning stale rows and 500 on strict DBs
|
2 weeks ago |
Shlee
|
0404e038b3
|
Merge pull request #7130 from shleeable/fix/directory-listing-feature-flags
Fix directory listing reporting oauth and activitypub flags always true
|
2 weeks ago |
Your Name
|
3cb5b6e1ff
|
Fix login activity groupBy returning stale rows and 500 on strict DBs
|
2 weeks ago |
Your Name
|
fe70cd1155
|
Fix directory listing reporting oauth and activitypub flags always true
|
2 weeks ago |
Shlee
|
aa152372c9
|
Merge pull request #7121 from shleeable/fix/status-remote-update-ssrf
Harden remote status update media fetch against SSRF
|
2 weeks ago |
Shlee
|
18ba2dc932
|
Merge pull request #7119 from shleeable/fix/hashtag-follow-null-profile
Guard hashtag follow against null profile for soft-deleted accounts
|
2 weeks ago |
Shlee
|
1cb56f0ba0
|
Merge pull request #7120 from shleeable/fix/inbox-keyid-host-validation
Validate publicKey.id host on inbox actor ingest
|
2 weeks ago |
Shlee
|
b30b711097
|
Merge pull request #7122 from shleeable/fix/reclaim-username-orphan-profile
Scope reclaim-username profile deletion and fail on surviving orphan
|
2 weeks ago |
Shlee
|
3b8d7b8d1f
|
Merge pull request #7123 from shleeable/fix/poll-vote-scope-authz
Enforce poll scope authorization on vote endpoint
|
2 weeks ago |
Shlee
|
0900509c27
|
Merge pull request #7124 from shleeable/fix/collection-store-visibility-required
Require visibility on collection store to match NOT NULL schema
|
2 weeks ago |
Shlee
|
b43a5f99d7
|
Merge pull request #7125 from shleeable/fix/statusdelete-trashed-profile
Fix StatusDelete crashing on soft-deleted owning profile
|
2 weeks ago |
Shlee
|
3f63b245bc
|
Merge pull request #7126 from shleeable/fix/admin-instance-stats-postgres-guard
Fix admin instance stats endpoint 404 on Postgres via strict is_admin boolean check
|
2 weeks ago |
Shlee
|
fe8c53ddd7
|
Merge pull request #7127 from shleeable/fix/favourites-pagination-off-by-one
Fix favourites pagination skipping one favourite per page
|
2 weeks ago |
Shlee
|
602e498f0a
|
Update ApiV1Controller.php
|
2 weeks ago |
Shlee
|
041b390bb6
|
Merge pull request #7128 from shleeable/fix/account-statuses-max-id-pagination
Fix accounts statuses max_id pagination
|
2 weeks ago |
Your Name
|
a286509622
|
Require visibility on collection store to match NOT NULL schema
|
2 weeks ago |
Your Name
|
a8a7a430d7
|
Enforce poll scope authorization on vote endpoint
|
2 weeks ago |
Your Name
|
a1724a4b1c
|
Scope reclaim-username profile deletion and fail on surviving orphan
|
2 weeks ago |