Commit Graph

13285 Commits (444c796bac5e618f9fcfe523f65f7fee87d805aa)
 

Author SHA1 Message Date
Your Name 444c796bac Trigger StatusHashtag observer on deletion to keep cached_count accurate 2 weeks ago
Shlee 057648778b
Merge pull request #7152 from pixelfed/shleeable-patch-1
Add block check to story comment
2 weeks ago
Shlee fc80bce460
Update StoryApiV1Controller.php 2 weeks ago
Shlee 5bd33640fe
Merge pull request #7151 from shleeable/fix/status-dedupe-deterministic
Deterministically keep earliest status per uri in dedupe command
2 weeks ago
Your Name e360fab619 Deterministically keep earliest status per uri in dedupe command 2 weeks ago
Shlee 189408edf0
Merge pull request #7149 from shleeable/fix/authorize-interaction-intended-redirect
Use intended-redirect session for authorize_interaction guest login
2 weeks ago
Your Name 0234a305ae Use intended-redirect session for authorize_interaction guest login 2 weeks ago
Shlee c13b8a23bd
Merge pull request #7148 from shleeable/fix/unlike-federate-before-delete
Federate unlike before deleting Like so retries can deliver
2 weeks ago
Your Name 1ffda3eba9 Federate unlike before deleting Like so retries can deliver 2 weeks ago
Shlee ca4ad83255
Merge pull request #7147 from shleeable/chore/lint-session-tests
Apply Pint lint fixes to session test files
2 weeks ago
Your Name eb9bd11303 Apply Pint lint fixes to session test files 2 weeks ago
Shlee 46fb9613e3
Merge pull request #7146 from shleeable/fix/2fa-checkpoint-throttle
Rate limit and audit-log 2FA checkpoint verification
2 weeks ago
Your Name 8cebb24c04 Rate limit and audit-log 2FA checkpoint verification 2 weeks ago
Shlee 0ebe1f8fb1
Merge pull request #7145 from shleeable/fix/media-blocklist-check-before-store
Check media blocklist before storing uploads to prevent orphaned files
2 weeks ago
Your Name ec6827bae2 Check media blocklist before storing uploads to prevent orphaned files 2 weeks ago
Shlee c3e01f86cf
Merge pull request #7144 from shleeable/fix/curated-register-email-escape
Escape user-provided content in curated register admin emails
2 weeks ago
Your Name 4df40cb772 Escape user-provided content in curated register admin emails 2 weeks ago
Shlee cecdad5b53
Merge pull request #7143 from shleeable/fix/search-controller-pgsql-ilike
Use ILIKE for case-insensitive search on PostgreSQL
2 weeks ago
Your Name 613cf413de Use ILIKE for case-insensitive search on PostgreSQL 2 weeks ago
Shlee 173abef5c5
Merge pull request #7142 from shleeable/fix/reblog-duplicate-dispatch
Only dispatch SharePipeline for newly-created reblogs
2 weeks ago
Your Name d190ba7b66 Only dispatch SharePipeline for newly-created reblogs 2 weeks ago
Shlee 0fc121b685
Merge pull request #7134 from shleeable/fix/storyfetch-ssrf
Route StoryFetch outbound requests through SSRF-hardened fetch service
2 weeks ago
Shlee 58c83a2c6b
Merge pull request #7141 from shleeable/fix/import-instagram-missing-profile
Drop Instagram import job when profile is missing instead of crashing
2 weeks ago
Your Name 922d7f766e Drop Instagram import job when profile is missing instead of crashing 2 weeks ago
Shlee ee64de9df4
Merge pull request #7140 from shleeable/fix/user-account-delete-user-agent
Send Pixelfed User-Agent on federated account deletion deliveries
2 weeks ago
Shlee a5cbea834f
Merge pull request #7138 from shleeable/fix/oob-authorize-omitted-redirect-uri
Detect OOB oauth client when redirect_uri omitted on authorize
2 weeks ago
Shlee ae31ed8e66
Merge pull request #7137 from shleeable/fix/story-remote-expiry-cache
Invalidate latest-story cache on remote story expiry and null-guard l…
2 weeks ago
Shlee 0e1a5686c3
Merge pull request #7139 from shleeable/fix/email-update-unique-ignore-self
Ignore own row when validating email update uniqueness
2 weeks ago
Your Name 327348be02 Send Pixelfed User-Agent on federated account deletion deliveries 2 weeks ago
Your Name 53ad34b321 Ignore own row when validating email update uniqueness 2 weeks ago
Your Name 462b4bc0da Detect OOB oauth client when redirect_uri omitted on authorize 2 weeks ago
Your Name 9850aac676 Invalidate latest-story cache on remote story expiry and null-guard latest() 2 weeks ago
Shlee 9c5be0e271
Merge pull request #7136 from shleeable/fix/custom-filter-rate-limit-ttl
Fix custom filter rate-limit counter never expiring
2 weeks ago
Your Name 63e3c95fae Fix custom filter rate-limit counter never expiring 2 weeks ago
Shlee 3dae966b52
Merge pull request #7135 from shleeable/fix/register-form-max-users-guard
Fix registration form redirecting when max_users is falsy
2 weeks ago
Your Name afcb68c183 Fix registration form redirecting when max_users is falsy 2 weeks ago
Your Name 9e84ad261d Route StoryFetch outbound requests through SSRF-hardened fetch service 2 weeks ago
Shlee daf83fd564
Merge pull request #7132 from shleeable/fix/pat-renew-kill-switch
Enforce pat_enabled kill-switch on personal access token renew
2 weeks ago
Shlee a546c4982a
Merge pull request #7133 from shleeable/fix/remote-auth-domain-compatible-guard
Fix isDomainCompatible throwing on non-json beagle response
2 weeks ago
Your Name d51cf4ccc9 Fix isDomainCompatible throwing on non-json beagle response 2 weeks ago
Your Name d2b11a71b3 Enforce pat_enabled kill-switch on personal access token renew 2 weeks ago
Shlee 13a441af93
Merge pull request #7131 from shleeable/fix/login-activity-groupby
Fix login activity groupBy returning stale rows and 500 on strict DBs
2 weeks ago
Shlee 0404e038b3
Merge pull request #7130 from shleeable/fix/directory-listing-feature-flags
Fix directory listing reporting oauth and activitypub flags always true
2 weeks ago
Your Name 3cb5b6e1ff Fix login activity groupBy returning stale rows and 500 on strict DBs 2 weeks ago
Your Name fe70cd1155 Fix directory listing reporting oauth and activitypub flags always true 2 weeks ago
Shlee aa152372c9
Merge pull request #7121 from shleeable/fix/status-remote-update-ssrf
Harden remote status update media fetch against SSRF
2 weeks ago
Shlee 18ba2dc932
Merge pull request #7119 from shleeable/fix/hashtag-follow-null-profile
Guard hashtag follow against null profile for soft-deleted accounts
2 weeks ago
Shlee 1cb56f0ba0
Merge pull request #7120 from shleeable/fix/inbox-keyid-host-validation
Validate publicKey.id host on inbox actor ingest
2 weeks ago
Shlee b30b711097
Merge pull request #7122 from shleeable/fix/reclaim-username-orphan-profile
Scope reclaim-username profile deletion and fail on surviving orphan
2 weeks ago
Shlee 3b8d7b8d1f
Merge pull request #7123 from shleeable/fix/poll-vote-scope-authz
Enforce poll scope authorization on vote endpoint
2 weeks ago