r3g_5z
f90552f62e
Drop XSS auditor
...
ci/woodpecker/pr/woodpecker Pipeline was successful
It's deprecated, removed in some, by all modern browsers and is known
to create XSS vulnerabilities in itself.
Signed-off-by: r3g_5z <june@terezi.dev>
2022-11-19 20:40:20 -05:00
floatingghost
e1e0d5d759
microblogpub federation fixes ( #288 )
...
ci/woodpecker/push/woodpecker Pipeline is pending
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #288
2022-11-18 11:14:35 +00:00
Haelwenn (lanodan) Monnier
3e0a5851e5
Set instance reachable on fetch
ci/woodpecker/push/woodpecker Pipeline was successful
2022-11-15 17:23:47 +00:00
floatingghost
2a1f17e3ed
and i yoink ( #275 )
...
ci/woodpecker/push/woodpecker Pipeline was successful
Co-authored-by: Mark Felder <feld@feld.me>
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #275
2022-11-14 15:07:26 +00:00
floatingghost
c1127e321b
Add configurable timeline per oban job ( #273 )
...
ci/woodpecker/push/woodpecker Pipeline is pending
Heavily inspired by https://git.pleroma.social/pleroma/pleroma/-/merge_requests/3777
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #273
2022-11-13 23:55:51 +00:00
FloatingGhost
89dbc7177b
Chores for 2022.11
ci/woodpecker/push/woodpecker Pipeline is pending
ci/woodpecker/pr/woodpecker Pipeline is pending
2022-11-11 16:12:04 +00:00
FloatingGhost
ac0c00cdee
Add media sources to connect-src if media proxy is enabled
ci/woodpecker/push/woodpecker Pipeline failed
2022-11-10 17:26:51 +00:00
FloatingGhost
bab1ab5b6c
strip \r and \r from content-disposition filenames
2022-11-10 11:54:12 +00:00
floatingghost
cc6a076202
Include requested_by in relationship ( #260 )
...
ci/woodpecker/push/woodpecker Pipeline is pending
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #260
2022-11-10 03:16:32 +00:00
FloatingGhost
0681a26dbb
Remove unused pattern
ci/woodpecker/push/woodpecker Pipeline is pending
2022-11-08 13:54:43 +00:00
FloatingGhost
4e8ab0deeb
fix count of poll voters
ci/woodpecker/push/woodpecker Pipeline is pending
2022-11-08 13:50:04 +00:00
FloatingGhost
2e895b6c02
make metdata check a debug log
ci/woodpecker/push/woodpecker Pipeline is pending
2022-11-08 11:03:43 +00:00
FloatingGhost
479aacb1b6
Add fallback for reports that don't have attached activities
ci/woodpecker/push/woodpecker Pipeline is pending
2022-11-08 11:01:47 +00:00
FloatingGhost
a0b8e3c842
Don't mess with the cache on metadata update
ci/woodpecker/push/woodpecker Pipeline is pending
2022-11-08 10:39:01 +00:00
FloatingGhost
7bbaa8f8e0
automatically trim loading *. prefixes on domain blocks
ci/woodpecker/push/woodpecker Pipeline was successful
2022-11-07 22:33:18 +00:00
floatingghost
31ad09010e
Fix regex usage in MRF ( #254 )
...
ci/woodpecker/push/woodpecker Pipeline is pending
fixes #235
fixes #228
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #254
2022-11-06 23:50:32 +00:00
FloatingGhost
5123b3a5dd
Add enabled check on /translation/languages
ci/woodpecker/push/woodpecker Pipeline is pending
2022-11-06 22:55:26 +00:00
floatingghost
b7e8ce2350
Scrape instance nodeinfo ( #251 )
...
ci/woodpecker/push/woodpecker Pipeline is pending
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #251
2022-11-06 22:49:39 +00:00
Thomas Citharel
4d0a51221a
Fix typo in CSP Report-To header name
...
ci/woodpecker/pr/woodpecker Pipeline failed
The header name was Report-To, not Reply-To.
In any case, that's now being changed to the Reporting-Endpoints HTTP
Response Header.
https://w3c.github.io/reporting/#header
https://github.com/w3c/reporting/issues/177
CanIUse says the Report-To header is still supported by current Chrome
and friends.
https://caniuse.com/mdn-http_headers_report-to
It doesn't have any data for the Reporting-Endpoints HTTP header, but
this article says Chrome 96 supports it.
https://web.dev/reporting-api/
(Even though that's come out one year ago, that's not compatible with
Network Error Logging which's still using the Report-To version of the
API)
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-11-04 15:02:13 +01:00
floatingghost
9038da01cc
Merge pull request 'Push.Impl: support edits' ( #244 ) from norm/akkoma:push-support-edits into develop
...
ci/woodpecker/push/woodpecker Pipeline was successful
Reviewed-on: #244
2022-11-01 15:14:08 +00:00
floatingghost
e44e147b54
Merge pull request 'fix flaky test_user_relationship_test.exs:81' ( #240 ) from ilja/akkoma:fix_flaky_test_user_relationship_test.exs_81 into develop
...
ci/woodpecker/push/woodpecker Pipeline was successful
Reviewed-on: #240
2022-11-01 14:44:23 +00:00
nullobsi
cbc693f832
Fix LDAP user registration ( #229 )
...
ci/woodpecker/push/woodpecker Pipeline is pending
Simple fix for LDAP user registration. I'm not sure what changed but I managed to get Akkoma running in a debug session and figured out it was missing a match for an extra value at the end. I don't know Elixir all that well so I'm not sure if this was the correct way to do it... but it works. :)
Reviewed-on: #229
Co-authored-by: nullobsi <me@nullob.si>
Co-committed-by: nullobsi <me@nullob.si>
2022-11-01 14:17:55 +00:00
marcin mikołajczak
6486211064
Push.Impl: support edits
...
ci/woodpecker/pr/woodpecker Pipeline failed
Signed-off-by: marcin mikołajczak <git@mkljczk.pl>
2022-10-28 01:20:19 -04:00
ilja
3562eaeedc
fix flaky test_user_relationship_test.exs:81
...
ci/woodpecker/pr/woodpecker Pipeline is pending
The problem was double. On the one hand, the function didn't actually return what was in the DB.
On the other hand the test was flaky because it used NaiveDateTime.utc_now() so test could fail or pass depending on a difference of microseconds.
Both are fixed now.
2022-10-23 13:31:01 +02:00
floatingghost
f36d14818d
Unilateral remove from followers ( #232 )
...
ci/woodpecker/push/woodpecker Pipeline was successful
from https://git.pleroma.social/pleroma/pleroma/-/merge_requests/3647/
Co-authored-by: marcin mikołajczak <git@mkljczk.pl>
Co-authored-by: Tusooa Zhu <tusooa@kazv.moe>
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #232
2022-10-19 10:01:14 +00:00
floatingghost
edf7d5089f
Merge pull request 'Check that the signature matches the creator' ( #230 ) from domain-blocks into develop
...
ci/woodpecker/push/woodpecker Pipeline was successful
Reviewed-on: #230
2022-10-14 11:41:34 +00:00
FloatingGhost
03662501c3
Check that the signature matches the creator
ci/woodpecker/push/woodpecker Pipeline was successful
ci/woodpecker/pr/woodpecker Pipeline was successful
2022-10-14 11:48:32 +01:00
FloatingGhost
856c57208b
Ensure deletes are handled after everything else
ci/woodpecker/push/woodpecker Pipeline was successful
ci/woodpecker/pr/woodpecker Pipeline was successful
2022-10-11 14:30:08 +01:00
FloatingGhost
cb9b0d3720
optimise notifications query
ci/woodpecker/push/woodpecker Pipeline is pending
ci/woodpecker/pr/woodpecker Pipeline was successful
2022-10-11 11:40:43 +01:00
FloatingGhost
8af50dea36
format
ci/woodpecker/push/woodpecker Pipeline is pending
ci/woodpecker/pr/woodpecker Pipeline was successful
2022-10-10 17:13:42 +01:00
FloatingGhost
ca9e6ffc55
Use inner lateral join to not get dropped in :total
ci/woodpecker/push/woodpecker Pipeline is pending
ci/woodpecker/pr/woodpecker Pipeline failed
2022-10-10 16:45:02 +01:00
FloatingGhost
574f010bc8
Extract deactivated users query to a join
ci/woodpecker/push/woodpecker Pipeline is pending
2022-10-10 15:55:58 +01:00
floatingghost
c6e63aaf6b
Backend settings sync ( #226 )
...
ci/woodpecker/push/woodpecker Pipeline was successful
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #226
2022-10-06 16:22:15 +00:00
floatingghost
b2aa82cee5
Fix false error in meilisearch index ( #221 )
...
ci/woodpecker/push/woodpecker Pipeline failed
the schema changed
https://docs.meilisearch.com/reference/api/documents.html#add-or-update-documents
this wasn't breaking anything, it would just report errors that were actually successes
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #221
2022-09-20 10:36:21 +00:00
Norm
561e1f2470
Make backups require its own scope ( #218 )
...
ci/woodpecker/push/woodpecker Pipeline is pending
Pulled from https://git.pleroma.social/pleroma/pleroma/-/merge_requests/3721 .
This makes backups require its own scope (`read:backups`) instead of the `read:accounts` scope.
Co-authored-by: Tusooa Zhu <tusooa@kazv.moe>
Reviewed-on: #218
Co-authored-by: Norm <normandy@biribiri.dev>
Co-committed-by: Norm <normandy@biribiri.dev>
2022-09-19 17:31:35 +00:00
a1batross
77596a3021
User: search: exclude deactivated users from user search
...
ci/woodpecker/pr/woodpecker Pipeline is pending
This way we don't pollute search results with deactivated and deleted users
2022-09-15 21:21:06 -04:00
Tusooa Zhu
2aa8e66527
Fix User.get_or_fetch/1 with usernames starting with http
2022-09-11 20:29:05 +01:00
Hélène
1acd38fe7f
OAuthPlug: use user cache instead of joining
...
As this plug is called on every request, this should reduce load on the
database by not requiring to select on the users table every single
time, and to instead use the by-ID user cache whenever possible.
2022-09-11 19:55:55 +01:00
Hélène
3e2d15c71d
emoji-test: update to latest 15.0 draft
2022-09-11 19:55:45 +01:00
Hélène
8683252fc5
Metadata/Utils: use summary as description if set
...
When generating OpenGraph and TwitterCard metadata for a post, the
summary field will be used first if it is set to generate the post
description.
2022-09-11 19:55:38 +01:00
Hélène
0b14f02ed2
User: generate private keys on user creation
...
This fixes a race condition bug where keys could be regenerated
post-federation, causing activities and HTTP signatures from an user to
be dropped due to key differences.
2022-09-11 19:54:37 +01:00
Hélène
e88f36f72b
ObjectView: do not fetch an object for its ID
...
Non-Create/Listen activities had their associated object field
normalized and fetched, but only to use their `id` field, which is both
slow and redundant. This also failed on Undo activities, which delete
the associated object/activity in database.
Undo activities will now render properly and database loads should
improve ever so slightly.
2022-09-11 19:52:59 +01:00
Norm
a6d85003fe
Remote interaction with posts ( #198 )
...
ci/woodpecker/push/woodpecker Pipeline was successful
Grabbed from https://git.pleroma.social/pleroma/pleroma/-/merge_requests/3587
Co-authored-by: Tusooa Zhu <tusooa@kazv.moe>
Reviewed-on: #198
Co-authored-by: Norm <normandy@biribiri.dev>
Co-committed-by: Norm <normandy@biribiri.dev>
2022-09-08 10:19:22 +00:00
floatingghost
2641dcdd15
Post editing ( #202 )
...
ci/woodpecker/push/woodpecker Pipeline was successful
Rebased from #103
Co-authored-by: Tusooa Zhu <tusooa@kazv.moe>
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #202
2022-09-06 19:24:02 +00:00
FloatingGhost
6c80977b06
turn inlineQuotePolicy on by default
ci/woodpecker/push/woodpecker Pipeline was successful
2022-09-05 17:22:33 +01:00
FloatingGhost
f6304cfd78
add extra tests for builder
ci/woodpecker/push/woodpecker Pipeline was successful
2022-09-05 01:24:40 +01:00
FloatingGhost
1c7d7845c3
fix compilation warnings
ci/woodpecker/push/woodpecker Pipeline is pending
2022-09-05 00:39:32 +01:00
floatingghost
1b826eea54
Allow reacting with remote emoji when they exist on the post ( #200 )
...
ci/woodpecker/push/woodpecker Pipeline was successful
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #200
2022-09-04 23:31:41 +00:00
floatingghost
7a90d71e8d
ensure .exs config is used before default ( #197 )
...
ci/woodpecker/push/woodpecker Pipeline was successful
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #197
2022-09-02 22:05:39 +00:00
floatingghost
8e4de118c1
Don't persist local undone follow ( #194 )
...
ci/woodpecker/push/woodpecker Pipeline was successful
same deal but backwards this time
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: #194
2022-08-31 18:00:36 +00:00