Your Name
|
444c796bac
|
Trigger StatusHashtag observer on deletion to keep cached_count accurate
|
2 weeks ago |
Shlee
|
057648778b
|
Merge pull request #7152 from pixelfed/shleeable-patch-1
Add block check to story comment
|
2 weeks ago |
Shlee
|
fc80bce460
|
Update StoryApiV1Controller.php
|
2 weeks ago |
Shlee
|
5bd33640fe
|
Merge pull request #7151 from shleeable/fix/status-dedupe-deterministic
Deterministically keep earliest status per uri in dedupe command
|
2 weeks ago |
Your Name
|
e360fab619
|
Deterministically keep earliest status per uri in dedupe command
|
2 weeks ago |
Shlee
|
189408edf0
|
Merge pull request #7149 from shleeable/fix/authorize-interaction-intended-redirect
Use intended-redirect session for authorize_interaction guest login
|
2 weeks ago |
Your Name
|
0234a305ae
|
Use intended-redirect session for authorize_interaction guest login
|
2 weeks ago |
Shlee
|
c13b8a23bd
|
Merge pull request #7148 from shleeable/fix/unlike-federate-before-delete
Federate unlike before deleting Like so retries can deliver
|
2 weeks ago |
Your Name
|
1ffda3eba9
|
Federate unlike before deleting Like so retries can deliver
|
2 weeks ago |
Shlee
|
ca4ad83255
|
Merge pull request #7147 from shleeable/chore/lint-session-tests
Apply Pint lint fixes to session test files
|
2 weeks ago |
Your Name
|
eb9bd11303
|
Apply Pint lint fixes to session test files
|
2 weeks ago |
Shlee
|
46fb9613e3
|
Merge pull request #7146 from shleeable/fix/2fa-checkpoint-throttle
Rate limit and audit-log 2FA checkpoint verification
|
2 weeks ago |
Your Name
|
8cebb24c04
|
Rate limit and audit-log 2FA checkpoint verification
|
2 weeks ago |
Shlee
|
0ebe1f8fb1
|
Merge pull request #7145 from shleeable/fix/media-blocklist-check-before-store
Check media blocklist before storing uploads to prevent orphaned files
|
2 weeks ago |
Your Name
|
ec6827bae2
|
Check media blocklist before storing uploads to prevent orphaned files
|
2 weeks ago |
Shlee
|
c3e01f86cf
|
Merge pull request #7144 from shleeable/fix/curated-register-email-escape
Escape user-provided content in curated register admin emails
|
2 weeks ago |
Your Name
|
4df40cb772
|
Escape user-provided content in curated register admin emails
|
2 weeks ago |
Shlee
|
cecdad5b53
|
Merge pull request #7143 from shleeable/fix/search-controller-pgsql-ilike
Use ILIKE for case-insensitive search on PostgreSQL
|
2 weeks ago |
Your Name
|
613cf413de
|
Use ILIKE for case-insensitive search on PostgreSQL
|
2 weeks ago |
Shlee
|
173abef5c5
|
Merge pull request #7142 from shleeable/fix/reblog-duplicate-dispatch
Only dispatch SharePipeline for newly-created reblogs
|
2 weeks ago |
Your Name
|
d190ba7b66
|
Only dispatch SharePipeline for newly-created reblogs
|
2 weeks ago |
Shlee
|
0fc121b685
|
Merge pull request #7134 from shleeable/fix/storyfetch-ssrf
Route StoryFetch outbound requests through SSRF-hardened fetch service
|
2 weeks ago |
Shlee
|
58c83a2c6b
|
Merge pull request #7141 from shleeable/fix/import-instagram-missing-profile
Drop Instagram import job when profile is missing instead of crashing
|
2 weeks ago |
Your Name
|
922d7f766e
|
Drop Instagram import job when profile is missing instead of crashing
|
2 weeks ago |
Shlee
|
ee64de9df4
|
Merge pull request #7140 from shleeable/fix/user-account-delete-user-agent
Send Pixelfed User-Agent on federated account deletion deliveries
|
2 weeks ago |
Shlee
|
a5cbea834f
|
Merge pull request #7138 from shleeable/fix/oob-authorize-omitted-redirect-uri
Detect OOB oauth client when redirect_uri omitted on authorize
|
2 weeks ago |
Shlee
|
ae31ed8e66
|
Merge pull request #7137 from shleeable/fix/story-remote-expiry-cache
Invalidate latest-story cache on remote story expiry and null-guard l…
|
2 weeks ago |
Shlee
|
0e1a5686c3
|
Merge pull request #7139 from shleeable/fix/email-update-unique-ignore-self
Ignore own row when validating email update uniqueness
|
2 weeks ago |
Your Name
|
327348be02
|
Send Pixelfed User-Agent on federated account deletion deliveries
|
2 weeks ago |
Your Name
|
53ad34b321
|
Ignore own row when validating email update uniqueness
|
2 weeks ago |
Your Name
|
462b4bc0da
|
Detect OOB oauth client when redirect_uri omitted on authorize
|
2 weeks ago |
Your Name
|
9850aac676
|
Invalidate latest-story cache on remote story expiry and null-guard latest()
|
2 weeks ago |
Shlee
|
9c5be0e271
|
Merge pull request #7136 from shleeable/fix/custom-filter-rate-limit-ttl
Fix custom filter rate-limit counter never expiring
|
2 weeks ago |
Your Name
|
63e3c95fae
|
Fix custom filter rate-limit counter never expiring
|
2 weeks ago |
Shlee
|
3dae966b52
|
Merge pull request #7135 from shleeable/fix/register-form-max-users-guard
Fix registration form redirecting when max_users is falsy
|
2 weeks ago |
Your Name
|
afcb68c183
|
Fix registration form redirecting when max_users is falsy
|
2 weeks ago |
Your Name
|
9e84ad261d
|
Route StoryFetch outbound requests through SSRF-hardened fetch service
|
2 weeks ago |
Shlee
|
daf83fd564
|
Merge pull request #7132 from shleeable/fix/pat-renew-kill-switch
Enforce pat_enabled kill-switch on personal access token renew
|
2 weeks ago |
Shlee
|
a546c4982a
|
Merge pull request #7133 from shleeable/fix/remote-auth-domain-compatible-guard
Fix isDomainCompatible throwing on non-json beagle response
|
2 weeks ago |
Your Name
|
d51cf4ccc9
|
Fix isDomainCompatible throwing on non-json beagle response
|
2 weeks ago |
Your Name
|
d2b11a71b3
|
Enforce pat_enabled kill-switch on personal access token renew
|
2 weeks ago |
Shlee
|
13a441af93
|
Merge pull request #7131 from shleeable/fix/login-activity-groupby
Fix login activity groupBy returning stale rows and 500 on strict DBs
|
2 weeks ago |
Shlee
|
0404e038b3
|
Merge pull request #7130 from shleeable/fix/directory-listing-feature-flags
Fix directory listing reporting oauth and activitypub flags always true
|
2 weeks ago |
Your Name
|
3cb5b6e1ff
|
Fix login activity groupBy returning stale rows and 500 on strict DBs
|
2 weeks ago |
Your Name
|
fe70cd1155
|
Fix directory listing reporting oauth and activitypub flags always true
|
2 weeks ago |
Shlee
|
aa152372c9
|
Merge pull request #7121 from shleeable/fix/status-remote-update-ssrf
Harden remote status update media fetch against SSRF
|
2 weeks ago |
Shlee
|
18ba2dc932
|
Merge pull request #7119 from shleeable/fix/hashtag-follow-null-profile
Guard hashtag follow against null profile for soft-deleted accounts
|
2 weeks ago |
Shlee
|
1cb56f0ba0
|
Merge pull request #7120 from shleeable/fix/inbox-keyid-host-validation
Validate publicKey.id host on inbox actor ingest
|
2 weeks ago |
Shlee
|
b30b711097
|
Merge pull request #7122 from shleeable/fix/reclaim-username-orphan-profile
Scope reclaim-username profile deletion and fail on surviving orphan
|
2 weeks ago |
Shlee
|
3b8d7b8d1f
|
Merge pull request #7123 from shleeable/fix/poll-vote-scope-authz
Enforce poll scope authorization on vote endpoint
|
2 weeks ago |