aiden
/
pixelfed
mirror of https://github.com/pixelfed/pixelfed
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
14,446 Commits
14 Branches
55 Tags
153 MiB
dev
staging
feature/configurable-min-registration-age
configcache-clean-rebased
l10n_crowdin_translations
dockerfile-compile-ffmpeg-x264-x265
fix/media-storage-optimized-charge
fix/dm-remote-delete-media-leak
feat/emoji-cloud-storage-v2
feat/story-cloud-storage-v2
fix/hashtags-outside-bmp
copilot/review-old-issues
groups
vue3
v0.1.9
v0.10.0
v0.10.1
v0.10.10
v0.10.2
v0.10.3
v0.10.4
v0.10.5
v0.10.6
v0.10.7
v0.10.8
v0.10.9
v0.11.0
v0.11.1
v0.11.10
v0.11.11
v0.11.12
v0.11.13
v0.11.2
v0.11.3
v0.11.4
v0.11.5
v0.11.6
v0.11.7
v0.11.8
v0.11.9
v0.12.0
v0.12.1
v0.12.10
v0.12.11
v0.12.12
v0.12.2
v0.12.3
v0.12.4
v0.12.5
v0.12.6
v0.12.7
v0.12.8
v0.12.9
v0.13.0
v0.14.0
v0.14.1
v0.14.2
v0.14.3
v0.5.9
v0.6.0
v0.6.1
v0.7.6
v0.8.0
v0.8.5
v0.8.6
v0.9.0
v0.9.4
v0.9.5
v0.9.6
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'f955feba2f'
${ noResults }
Commit Graph

48 Commits (f955feba2f5cae305deccea6db78733f96b2b30d)

Author SHA1 Message Date
Daniel Supernault fbd52dd8fc
Improve federation handling 2 weeks ago
Daniel Supernault 6f688a31d7
Lint 2 weeks ago
Shlee ce4df00921
Update MediaStorageService.php 2 weeks ago
Your Name 3232761a74 fix: prevent remcache temp file leaks and add GC command 
The remote avatar/media fetchers wrote temp files to storage/app/remcache/
and only unlinked them on the happy path. Any exception between the write
and the unlink (e.g. a cloud upload failure) leaked the file, and nothing
swept the directory.

- Wrap post-write logic in fetchAvatar() and remoteToCloud() in try/finally
  so the temp file is always removed, even on failure
- Add gc:remcache command to delete stale remcache files (default >24h old,
  preserves .gitignore, supports --hours and --dry-run)
- Schedule gc:remcache daily to clean up any stragglers

StoryFetch already handled cleanup via try/catch and was left unchanged.
 4 weeks ago
Your Name 3d82a8e8b2 Fix unauthenticated SSRF in remote media/avatar fetch (variant of CVE-2026-71246) 
The remote media path validated URLs only as strings (Helpers::validateUrl
normalizes the host + checks a ban list) and then downloaded them with
Http::head + file_get_contents($url), which resolve DNS themselves and
follow redirects with no private-IP checks and no address pinning. A remote
actor whose icon.url redirected to an internal address (e.g. 172.18.0.1 or
169.254.169.254) made the queue worker fetch internal content and, for
image responses, republish it at a public avatar URL. No account required.

Fixes:
- Add SecureMediaFetchService: validates URL, resolves + rejects non-global
  IPs (fail-closed), pins the connection to the validated IP via
  CURLOPT_RESOLVE, disables auto-redirects with per-hop re-validation, and
  enforces https-only + a byte cap. Mirrors the ActivityPubFetchService
  hardening from CVE-2026-71246.
- Route MediaStorageService head()/fetchAvatar()/remoteToCloud() through it,
  removing the bare Http::head and file_get_contents($url) sinks.
- validateUrl(): when DNS verification is enabled, reject hosts that resolve
  into reserved ranges, closing the metadata.google.internal bypass.
- Harden adjacent same-class sinks: CustomEmojiService (emoji doc + image +
  head), FetchCacheService/webfinger, and DiscoverActor.
- Add regression tests (tests/Unit/ActivityPub/SsrfUrlValidationTest.php).
 4 weeks ago
Shlee f018004b56
Merge pull request #6892 from pixelfed/refactor/move-models-to-namespace 
Refactor/move models to namespace
 4 weeks ago
Your Name c0cde2f682 refactor: move 52 legacy models from App\ to App\Models\ 
Move all Eloquent models from the app/ root directory to app/Models/
for consistency with modern Laravel conventions. The project already had
54 models in App\Models; this migrates the remaining 52 legacy models.

Changes:
- Move 52 model files from app/ to app/Models/
- Update namespace declarations in each model
- Update all ~1000 import references across the codebase
- Add Relation::morphMap() in AppServiceProvider for backward
  compatibility with existing polymorphic database records
- Add missing HasSnowflakePrimary imports for models that relied
  on same-namespace resolution
 4 weeks ago
Your Name a142db87b4 polish 4 weeks ago
Daniel Supernault 53742fa699
Lint 9 months ago
Shlee ea39e52d49
Update MediaStorageService.php 11 months ago
Shlee 3d92562764
Larastan: Update MediaStorageService.php 11 months ago
Anil Kulkarni dbd2e17728
Ensure the cloud url is used when publishing a status to activitypub 
Posting is done in two steps - first the media is uploaded and that begins a processing pipeline. When the media is finally
processed, the media pipeline sets the cdn_url to the final image (in the cloud if configured).
At any time, the user can click post. This begins a separate NewStatusPipeline to deliver the status over ActivityPub.
This causes a race. If the NewStatusPipeline runs before the media finishes processing, then the status is delivered with
the un-processed (and un-optimized images). If pixelfed is set to use cloud storage, then the ActivityPub message also incorrectly
uses the local media.

This commit fixes the race condition by waiting for all the media to be processed before sending the message over ActivityPub.
A new publish_delayed column is set per-post, indicating whether the
status should be delayed until all media is processed.

Then, the NewStatusPipeline is called twice per post -
When the media finishes processing and when the status is posted.

Both times, the pipeline will check to see if it's valid to post
If so, the pipeline will try to set publish_delayed to false
and only if it is the first time doing so, will it publish the post
 11 months ago
Daniel Supernault 2e719bd008
Update media storage pipeline, improve support for non-local filesystems 1 year ago
Daniel Supernault 2eb3957609
Lint 1 year ago
Daniel Supernault d0a3599834
Update MediaStorageService to clear the AP obj cache after S3 storage 1 year ago
Daniel Supernault ab9c13fe0d
New supported formats, Preserve ICC Color Profiles, libvips support 
Update image pipeline to handle avif, heic and webp and preserve ICC color profiles and added libvips support.
 1 year ago
daniel 92ce41ce18
Merge pull request #5664 from hnrd/fix-migrate2cloud 
Skip thumbnail cloud upload if no thumbnail exists
 2 years ago
tercean 3eb9257def Skip thumbnail cloud upload if no thumbnail exists 
migrate2cloud fails on media without thumbnail.
fix check for existing thumbnail, skip upload if none exists.
 2 years ago
Daniel Supernault 280f63dc6a
Update MediaStorageService, handle local media deletes after successful S3 upload 2 years ago
Daniel Supernault 665581d80c
Update cloud storage, use config_cache 3 years ago
Daniel Supernault 622e9cee97
Add S3 IG Import Media Storage 3 years ago
Daniel Supernault 82798b5ea3
Update AvatarPipeline, improve refresh logic and garbage collection to purge old avatars 3 years ago
Daniel Supernault fb1deb6e28
Add Resilient Media Storage 3 years ago
Daniel Supernault 3590adbd87
Update MediaStorageService, improve head header handling 3 years ago
Daniel Supernault e8d4ce1888
Update MediaStorageService 3 years ago
Daniel Supernault d6374cfe70
Update MediaStorageService 3 years ago
Daniel Supernault 51768083fe
Added store remote media on S3 config setting, disabled by default 3 years ago
Daniel Supernault 964c62da31
Update MediaStorageService, fix improper path 4 years ago
Daniel Supernault 1cdc0fe8ed
Update delete pipelines 4 years ago
Daniel Supernault de56b0f078
Update MediaStorageService, clear MediaService and StatusService caches after localToCloud 4 years ago
Daniel Supernault 66226658db
Update MediaStorageService, improve support for pleroma .blob avatars 4 years ago
Daniel Supernault 02edd19d4d
Update Avatar pipeline, fix cloud storage media_path 4 years ago
Daniel Supernault 319f0ba50f
Update MediaStorageService, fix size check bug 4 years ago
Daniel Supernault 989e42497a
Update Profile, fix avatarUrl paths. Fixes #3559 #3634 4 years ago
Daniel Supernault b0422d4f26
Fix remote profile avatar urls when storing locally 4 years ago
Daniel Supernault 1de7a136f6
Update MediaStorageService 4 years ago
Daniel Supernault 1c20d6960a
Update MediaStorageService, fix reremote avatar bug 5 years ago
Daniel Supernault b4bd0400c2
Store remote avatars locally if S3 not enabled 5 years ago
Daniel Supernault 9d9e9ce7fa
Update MediaStorageService, improve header parsing 5 years ago
Daniel Supernault 07bc5d5c83
Update MediaStorageService 5 years ago
Daniel Supernault 41792eea56
Update config() to config_cache() 5 years ago
Daniel Supernault 1d54204635
Update config() to config_cache() 5 years ago
Daniel Supernault 1769cdfd74
Update MediaStorageService, improve head checks to fix failed jobs 6 years ago
Daniel Supernault 37dbb3de29
Update MediaStorageService, dispatch deletes to MediaDeletePipeline 6 years ago
Daniel Supernault 94a9f685b5
Update MediaStorageService, add avatar method 6 years ago
Daniel Supernault ce6ab80dba
Update MediaStorageService, clear transformer cache after storing media 6 years ago
Daniel Supernault be6d12fcb6
Update MediaPipeline, handle cloud object storage 6 years ago
Daniel Supernault 234f72f3aa
Update ImageOptimizePipeline, add skip_optimize and MediaStorageService support 6 years ago