Your Name
|
ec6827bae2
|
Check media blocklist before storing uploads to prevent orphaned files
|
3 weeks ago |
Shlee
|
0fc121b685
|
Merge pull request #7134 from shleeable/fix/storyfetch-ssrf
Route StoryFetch outbound requests through SSRF-hardened fetch service
|
3 weeks ago |
Shlee
|
58c83a2c6b
|
Merge pull request #7141 from shleeable/fix/import-instagram-missing-profile
Drop Instagram import job when profile is missing instead of crashing
|
3 weeks ago |
Your Name
|
922d7f766e
|
Drop Instagram import job when profile is missing instead of crashing
|
3 weeks ago |
Shlee
|
ee64de9df4
|
Merge pull request #7140 from shleeable/fix/user-account-delete-user-agent
Send Pixelfed User-Agent on federated account deletion deliveries
|
3 weeks ago |
Shlee
|
a5cbea834f
|
Merge pull request #7138 from shleeable/fix/oob-authorize-omitted-redirect-uri
Detect OOB oauth client when redirect_uri omitted on authorize
|
3 weeks ago |
Shlee
|
ae31ed8e66
|
Merge pull request #7137 from shleeable/fix/story-remote-expiry-cache
Invalidate latest-story cache on remote story expiry and null-guard l…
|
3 weeks ago |
Shlee
|
0e1a5686c3
|
Merge pull request #7139 from shleeable/fix/email-update-unique-ignore-self
Ignore own row when validating email update uniqueness
|
3 weeks ago |
Your Name
|
327348be02
|
Send Pixelfed User-Agent on federated account deletion deliveries
|
3 weeks ago |
Your Name
|
53ad34b321
|
Ignore own row when validating email update uniqueness
|
3 weeks ago |
Your Name
|
462b4bc0da
|
Detect OOB oauth client when redirect_uri omitted on authorize
|
3 weeks ago |
Your Name
|
9850aac676
|
Invalidate latest-story cache on remote story expiry and null-guard latest()
|
3 weeks ago |
Shlee
|
9c5be0e271
|
Merge pull request #7136 from shleeable/fix/custom-filter-rate-limit-ttl
Fix custom filter rate-limit counter never expiring
|
3 weeks ago |
Your Name
|
63e3c95fae
|
Fix custom filter rate-limit counter never expiring
|
3 weeks ago |
Shlee
|
3dae966b52
|
Merge pull request #7135 from shleeable/fix/register-form-max-users-guard
Fix registration form redirecting when max_users is falsy
|
3 weeks ago |
Your Name
|
afcb68c183
|
Fix registration form redirecting when max_users is falsy
|
3 weeks ago |
Your Name
|
9e84ad261d
|
Route StoryFetch outbound requests through SSRF-hardened fetch service
|
3 weeks ago |
Shlee
|
daf83fd564
|
Merge pull request #7132 from shleeable/fix/pat-renew-kill-switch
Enforce pat_enabled kill-switch on personal access token renew
|
3 weeks ago |
Shlee
|
a546c4982a
|
Merge pull request #7133 from shleeable/fix/remote-auth-domain-compatible-guard
Fix isDomainCompatible throwing on non-json beagle response
|
3 weeks ago |
Your Name
|
d51cf4ccc9
|
Fix isDomainCompatible throwing on non-json beagle response
|
3 weeks ago |
Your Name
|
d2b11a71b3
|
Enforce pat_enabled kill-switch on personal access token renew
|
3 weeks ago |
Shlee
|
13a441af93
|
Merge pull request #7131 from shleeable/fix/login-activity-groupby
Fix login activity groupBy returning stale rows and 500 on strict DBs
|
3 weeks ago |
Shlee
|
0404e038b3
|
Merge pull request #7130 from shleeable/fix/directory-listing-feature-flags
Fix directory listing reporting oauth and activitypub flags always true
|
3 weeks ago |
Your Name
|
3cb5b6e1ff
|
Fix login activity groupBy returning stale rows and 500 on strict DBs
|
3 weeks ago |
Your Name
|
fe70cd1155
|
Fix directory listing reporting oauth and activitypub flags always true
|
3 weeks ago |
Shlee
|
aa152372c9
|
Merge pull request #7121 from shleeable/fix/status-remote-update-ssrf
Harden remote status update media fetch against SSRF
|
3 weeks ago |
Shlee
|
18ba2dc932
|
Merge pull request #7119 from shleeable/fix/hashtag-follow-null-profile
Guard hashtag follow against null profile for soft-deleted accounts
|
3 weeks ago |
Shlee
|
1cb56f0ba0
|
Merge pull request #7120 from shleeable/fix/inbox-keyid-host-validation
Validate publicKey.id host on inbox actor ingest
|
3 weeks ago |
Shlee
|
b30b711097
|
Merge pull request #7122 from shleeable/fix/reclaim-username-orphan-profile
Scope reclaim-username profile deletion and fail on surviving orphan
|
3 weeks ago |
Shlee
|
3b8d7b8d1f
|
Merge pull request #7123 from shleeable/fix/poll-vote-scope-authz
Enforce poll scope authorization on vote endpoint
|
3 weeks ago |
Shlee
|
0900509c27
|
Merge pull request #7124 from shleeable/fix/collection-store-visibility-required
Require visibility on collection store to match NOT NULL schema
|
3 weeks ago |
Shlee
|
b43a5f99d7
|
Merge pull request #7125 from shleeable/fix/statusdelete-trashed-profile
Fix StatusDelete crashing on soft-deleted owning profile
|
3 weeks ago |
Shlee
|
3f63b245bc
|
Merge pull request #7126 from shleeable/fix/admin-instance-stats-postgres-guard
Fix admin instance stats endpoint 404 on Postgres via strict is_admin boolean check
|
3 weeks ago |
Shlee
|
fe8c53ddd7
|
Merge pull request #7127 from shleeable/fix/favourites-pagination-off-by-one
Fix favourites pagination skipping one favourite per page
|
3 weeks ago |
Shlee
|
602e498f0a
|
Update ApiV1Controller.php
|
3 weeks ago |
Shlee
|
041b390bb6
|
Merge pull request #7128 from shleeable/fix/account-statuses-max-id-pagination
Fix accounts statuses max_id pagination
|
3 weeks ago |
Your Name
|
a286509622
|
Require visibility on collection store to match NOT NULL schema
|
3 weeks ago |
Your Name
|
a8a7a430d7
|
Enforce poll scope authorization on vote endpoint
|
3 weeks ago |
Your Name
|
a1724a4b1c
|
Scope reclaim-username profile deletion and fail on surviving orphan
|
3 weeks ago |
Your Name
|
e79135a771
|
Fix favourites pagination skipping one favourite per page boundary
|
3 weeks ago |
Your Name
|
856f2f8f2d
|
Harden remote status update media fetch against SSRF
|
3 weeks ago |
Your Name
|
8258a5a5f8
|
Guard hashtag follow against null profile for soft-deleted accounts
|
3 weeks ago |
Your Name
|
1905da723d
|
Validate publicKey.id host on inbox actor ingest to prevent key_id poisoning
|
3 weeks ago |
Your Name
|
df1e771f93
|
Fix admin instance stats endpoint 404 on Postgres via strict is_admin check
|
3 weeks ago |
Your Name
|
6e7419bb96
|
Fix StatusDelete crashing on soft-deleted owning profile
|
3 weeks ago |
Your Name
|
3b951d41d8
|
Fix accounts statuses max_id pagination returning duplicate boundary status
|
3 weeks ago |
dansup
|
c40814d9b3
|
Merge pull request #7115 from pixelfed/shleeable-patch-1
Dead code?: Remove blindKeyRotation
|
3 weeks ago |
Daniel Supernault
|
94b8fea32a
|
Update AccountTransformer
|
3 weeks ago |
Shlee
|
4acc0dd528
|
Update DeleteWorker.php
|
3 weeks ago |
Shlee
|
56251cb05f
|
Update InboxValidator.php
|
3 weeks ago |