Commit Graph

4561 Commits (613cf413de1b76abc8f0d7594e10f4454271e5fd)

Author SHA1 Message Date
Your Name 613cf413de Use ILIKE for case-insensitive search on PostgreSQL 3 weeks ago
Shlee 0fc121b685
Merge pull request #7134 from shleeable/fix/storyfetch-ssrf
Route StoryFetch outbound requests through SSRF-hardened fetch service
3 weeks ago
Shlee 58c83a2c6b
Merge pull request #7141 from shleeable/fix/import-instagram-missing-profile
Drop Instagram import job when profile is missing instead of crashing
3 weeks ago
Your Name 922d7f766e Drop Instagram import job when profile is missing instead of crashing 3 weeks ago
Shlee ee64de9df4
Merge pull request #7140 from shleeable/fix/user-account-delete-user-agent
Send Pixelfed User-Agent on federated account deletion deliveries
3 weeks ago
Shlee a5cbea834f
Merge pull request #7138 from shleeable/fix/oob-authorize-omitted-redirect-uri
Detect OOB oauth client when redirect_uri omitted on authorize
3 weeks ago
Shlee ae31ed8e66
Merge pull request #7137 from shleeable/fix/story-remote-expiry-cache
Invalidate latest-story cache on remote story expiry and null-guard l…
3 weeks ago
Your Name 327348be02 Send Pixelfed User-Agent on federated account deletion deliveries 3 weeks ago
Your Name 53ad34b321 Ignore own row when validating email update uniqueness 3 weeks ago
Your Name 462b4bc0da Detect OOB oauth client when redirect_uri omitted on authorize 3 weeks ago
Your Name 9850aac676 Invalidate latest-story cache on remote story expiry and null-guard latest() 3 weeks ago
Shlee 9c5be0e271
Merge pull request #7136 from shleeable/fix/custom-filter-rate-limit-ttl
Fix custom filter rate-limit counter never expiring
3 weeks ago
Your Name 63e3c95fae Fix custom filter rate-limit counter never expiring 3 weeks ago
Your Name afcb68c183 Fix registration form redirecting when max_users is falsy 3 weeks ago
Your Name 9e84ad261d Route StoryFetch outbound requests through SSRF-hardened fetch service 3 weeks ago
Shlee daf83fd564
Merge pull request #7132 from shleeable/fix/pat-renew-kill-switch
Enforce pat_enabled kill-switch on personal access token renew
3 weeks ago
Shlee a546c4982a
Merge pull request #7133 from shleeable/fix/remote-auth-domain-compatible-guard
Fix isDomainCompatible throwing on non-json beagle response
3 weeks ago
Your Name d51cf4ccc9 Fix isDomainCompatible throwing on non-json beagle response 3 weeks ago
Your Name d2b11a71b3 Enforce pat_enabled kill-switch on personal access token renew 3 weeks ago
Shlee 13a441af93
Merge pull request #7131 from shleeable/fix/login-activity-groupby
Fix login activity groupBy returning stale rows and 500 on strict DBs
3 weeks ago
Your Name 3cb5b6e1ff Fix login activity groupBy returning stale rows and 500 on strict DBs 3 weeks ago
Your Name fe70cd1155 Fix directory listing reporting oauth and activitypub flags always true 3 weeks ago
Shlee aa152372c9
Merge pull request #7121 from shleeable/fix/status-remote-update-ssrf
Harden remote status update media fetch against SSRF
3 weeks ago
Shlee 18ba2dc932
Merge pull request #7119 from shleeable/fix/hashtag-follow-null-profile
Guard hashtag follow against null profile for soft-deleted accounts
3 weeks ago
Shlee 1cb56f0ba0
Merge pull request #7120 from shleeable/fix/inbox-keyid-host-validation
Validate publicKey.id host on inbox actor ingest
3 weeks ago
Shlee b30b711097
Merge pull request #7122 from shleeable/fix/reclaim-username-orphan-profile
Scope reclaim-username profile deletion and fail on surviving orphan
3 weeks ago
Shlee 3b8d7b8d1f
Merge pull request #7123 from shleeable/fix/poll-vote-scope-authz
Enforce poll scope authorization on vote endpoint
3 weeks ago
Shlee 0900509c27
Merge pull request #7124 from shleeable/fix/collection-store-visibility-required
Require visibility on collection store to match NOT NULL schema
3 weeks ago
Shlee b43a5f99d7
Merge pull request #7125 from shleeable/fix/statusdelete-trashed-profile
Fix StatusDelete crashing on soft-deleted owning profile
3 weeks ago
Shlee 3f63b245bc
Merge pull request #7126 from shleeable/fix/admin-instance-stats-postgres-guard
Fix admin instance stats endpoint 404 on Postgres via strict is_admin boolean check
3 weeks ago
Shlee fe8c53ddd7
Merge pull request #7127 from shleeable/fix/favourites-pagination-off-by-one
Fix favourites pagination skipping one favourite per page
3 weeks ago
Shlee 602e498f0a
Update ApiV1Controller.php 3 weeks ago
Your Name a286509622 Require visibility on collection store to match NOT NULL schema 3 weeks ago
Your Name a8a7a430d7 Enforce poll scope authorization on vote endpoint 3 weeks ago
Your Name a1724a4b1c Scope reclaim-username profile deletion and fail on surviving orphan 3 weeks ago
Your Name e79135a771 Fix favourites pagination skipping one favourite per page boundary 3 weeks ago
Your Name 856f2f8f2d Harden remote status update media fetch against SSRF 3 weeks ago
Your Name 8258a5a5f8 Guard hashtag follow against null profile for soft-deleted accounts 3 weeks ago
Your Name 1905da723d Validate publicKey.id host on inbox actor ingest to prevent key_id poisoning 3 weeks ago
Your Name df1e771f93 Fix admin instance stats endpoint 404 on Postgres via strict is_admin check 3 weeks ago
Your Name 6e7419bb96 Fix StatusDelete crashing on soft-deleted owning profile 3 weeks ago
Your Name 3b951d41d8 Fix accounts statuses max_id pagination returning duplicate boundary status 3 weeks ago
dansup c40814d9b3
Merge pull request #7115 from pixelfed/shleeable-patch-1
Dead code?: Remove blindKeyRotation
3 weeks ago
Daniel Supernault 94b8fea32a
Update AccountTransformer 3 weeks ago
Shlee 4acc0dd528
Update DeleteWorker.php 3 weeks ago
Shlee 56251cb05f
Update InboxValidator.php 3 weeks ago
Shlee 767c6ec201
Remove blindKeyRotation method from InboxWorker
Removed the blindKeyRotation method and its associated logic.
3 weeks ago
Daniel Supernault 7376a007a5
Update ApiV1Controller.php 3 weeks ago
Daniel Supernault 085eabccf9
Update account statuses endpoint 3 weeks ago
Daniel Supernault c558724e47
Update AP Helpers 3 weeks ago