Commit Graph

  • 9061d148be Ensure object id doesn’t change on refetch Oneric 2024-03-24 17:32:28 -0100
  • 3e134b07fa fetcher: return final URL after redirects from get_object Oneric 2024-03-15 18:57:09 -0100
  • f07eb4cb55 Sanity check fetched user data Oneric 2024-03-15 20:31:45 -0100
  • 59a142e0b0 Never fetch resource from ourselves Oneric 2024-03-13 21:00:23 -0100
  • fee57eb376 Move actor check into fetch_and_contain_remote_object_from_id Oneric 2024-03-13 20:21:19 -0100
  • c4cf4d7f0b Reject cross-domain redirects when fetching AP objects Oneric 2024-03-13 20:12:17 -0100
  • baaeffdebc Update spoofed activity test Oneric 2024-03-13 20:04:31 -0100
  • 2bcf633dc2 Document Pleroma.Object.Fetcher Oneric 2024-03-13 19:42:51 -0100
  • 93ab6a018e mix: fix docs task Oneric 2024-03-13 19:41:14 -0100
  • c806adbfdb Refactor Fetcher.get_object for readability Oneric 2024-03-11 22:52:46 +0100
  • ddd79ff22d Proactively harden emoji pack against path traversal Oneric 2024-03-10 07:15:26 +0100
  • d6d838cbe8 StealEmoji: check remote size before downloading Oneric 2024-03-10 01:35:35 +0100
  • 6d003e1acd test/steal_emoji: consolidate configuration setup Oneric 2024-03-10 01:14:51 +0100
  • d1ce5fd911 test/steal_emoji: reduce code duplication with mock macro Oneric 2024-03-10 00:44:12 +0100
  • a4fa2ec9af StealEmoji: make final paths infeasible to predict Oneric 2024-03-09 22:41:26 +0100
  • ee5ce87825 test: use pack functions to check for emoji Oneric 2024-03-09 21:39:25 +0000
  • d1c4d07404 Convert StealEmoji to pack.json Oneric 2024-03-08 03:06:40 +0100
  • fa98b44acf Fill out path for newly created packs Oneric 2024-03-09 22:18:00 +0100
  • 5b126567bb StealEmoji: drop superfluous basename Oneric 2024-03-07 23:39:00 +0100
  • a8c6c780b4 StealEmoji: use Content-Type and reject non-images Oneric 2024-03-07 23:35:05 +0100
  • 111cdb0d86 Split steal_emoji function for better readability Oneric 2024-03-07 13:07:02 +0100
  • af041db6dc Limit emoji stealer to alphanum, dash, or underscore characters Norm 2024-02-20 15:11:26 -0500
  • fb54c47f0b Update example nginx config Oneric 2024-03-10 19:01:17 +0000
  • fc36b04016 Drop media proxy same-domain default for base_url Oneric 2024-03-10 18:57:40 +0000
  • 11ae8344eb Sanitise Content-Type of media proxy URLs Oneric 2024-03-10 18:57:19 +0000
  • bcc528b2e2 Never automatically assign privileged content types Oneric 2024-03-07 01:02:32 -0100
  • e88d0a2853 Fix Content-Type of our schema Oneric 2024-03-07 00:18:00 +0100
  • ba558c0c24 Limit instance emoji to image types Oneric 2024-03-07 00:00:25 +0100
  • 0ec62acb9d Always insert Dedupe upload filter Oneric 2024-03-04 18:39:08 +0100
  • fef773ca35 Drop media base_url default and recommend different domain Oneric 2024-03-04 17:50:22 +0100
  • bdefbb8fd9 plug/upload_media: query config only once on init Oneric 2024-03-05 02:20:16 +0100
  • f7c9793542 Sanitise Content-Type of uploads Oneric 2024-03-04 17:50:21 +0100
  • 9cec6aa5a1 Properly enable gzip compression in nginx config #721 Norm 2024-03-14 00:06:59 -0400
  • 6116f81546
    Don't strip newlines in the Atom feed #709 Sandra Snan 2024-03-10 13:08:54 +0100
  • 7ef93c0b6d Add set_content_type to Plug.StaticNoCT Oneric 2024-03-04 17:50:20 +0100
  • dbb6091d01 Import copy of Plug.Static from Plug 1.15.3 Oneric 2024-03-04 17:50:20 +0100
  • 5d467af6c5 Update notes on security exploit handling Oneric 2024-03-04 17:50:19 +0100
  • 5d89e0c917 Allow for url to be a list #718 Helge 2024-03-03 09:11:45 +0100
  • f18e2ba42c Refresh Users much more aggressively when processing Move activities #714 Erin Shepherd 2024-02-29 21:08:25 +0100
  • fc95519dbf Allow fetching over IPv6 #708 Oneric 2024-02-25 23:27:10 +0100
  • a03f3a9d89 Merge branch 'develop' into stable v3.11.0 FloatingGhost 2024-02-24 13:57:20 +0000
  • 889b57df82 2024.02 release FloatingGhost 2024-02-24 13:54:21 +0000
  • 34ffb92db4 Update translation files Weblate 2023-10-22 11:53:48 +0000
  • c6dceb1802 Translated using Weblate (Polish) Weblate 2023-10-22 11:53:48 +0000
  • caaf2deb22 Translated using Weblate (Polish) Weblate 2023-10-22 11:53:48 +0000
  • 7d61fb0906 Merge pull request 'Fix static-fe Twitter metadata / URL previews' (#700) from Oneric/akkoma:staticfe-metadata into develop floatingghost 2024-02-24 13:42:55 +0000
  • cdf73e0ac8 Merge pull request 'Better document database differences for Pleroma migrations' (#699) from Oneric/akkoma:doc_pleroma-migration-db into develop floatingghost 2024-02-24 04:33:43 +0000
  • 967e6b8ade Merge pull request 'Docs: Add description for mrf_reject_newly_created_account_notes' (#695) from YokaiRick/akkoma:doc_mrf_reject_acc_notes into develop floatingghost 2024-02-24 04:31:28 +0000
  • d7c8e9df27 static-fe: don’t squeeze non-square avatars #705 Oneric 2024-02-23 23:39:44 +0000
  • a0daec6ea1 static-fe: don’t squeeze non-square emoji Oneric 2024-02-20 17:33:38 +0100
  • bff2812a93 More prominently document db migrations in migrations from Pleroma #699 Oneric 2024-02-19 17:53:11 +0100
  • 7964272c98 Document how to avoid data loss on migration from Pleroma Oneric 2024-02-19 17:33:14 +0100
  • c08f49d88e Add tests for static-fe metadata tags #700 Oneric 2024-02-21 00:33:32 +0000
  • 56156d59b7 Limit emoji stealer to alphanum, dash, or underscore characters #703 Norm 2024-02-20 15:11:26 -0500
  • 3111181d3c mix format FloatingGhost 2024-02-20 15:09:04 +0000
  • 2f9aad0e65 Merge pull request '[Security] StealEmojiPolicy: Sanitize shortcodes' (#701) from erincandescent/akkoma:stealemojipolicy-sanitize into develop floatingghost 2024-02-20 15:08:54 +0000
  • b387f4a1c1 Don't steal emoji who's shortcodes have dots or colons in their name #701 Erin Shepherd 2024-02-20 11:31:29 +0100
  • 7d94476dd6 StealEmojiPolicy: Sanitize shortcodes Haelwenn (lanodan) Monnier 2024-02-20 08:45:48 +0100
  • c25cfe9b7a fixed spelling #695 rick 2024-02-19 23:25:20 +0100
  • 41dd37d796 doc/cheatsheet: add missing MRFs Oneric 2024-02-19 00:13:10 +0100
  • 9830d54fa1 doc/cheatsheet: sort main MRF list alphabetically Oneric 2024-02-18 23:29:43 +0100
  • f254e4f530 doc/cheatsheet: add missing MRF config detail docs Oneric 2024-02-18 23:18:50 +0100
  • da4190c46e doc/cheatsheet: split out always active MRFs Oneric 2024-02-18 23:02:48 +0100
  • 7a2d68c3ab doc/cheatsheet: add link to ActivityExpiration config details Oneric 2024-02-18 23:12:30 +0100
  • 8e7a89605d doc/cheatsheet: move MRF policies key to end of section Oneric 2024-02-18 22:54:02 +0100
  • 1640d19448 doc/cheatsheet: move :activitypub section ahead Oneric 2024-02-18 22:52:43 +0100
  • 8f1776a8a7 Purge leftovers from FollowBot MRF Oneric 2024-02-18 22:25:42 +0100
  • 1ec6e193e6 doc: clarify RejectNewlyCreated uses local account discovery Oneric 2024-02-18 22:47:02 +0100
  • 37e2a35b86 Fix Twitter metadata Oneric 2024-02-16 04:32:09 +0100
  • 505e498b1a Normalise public adressing to fix federation #675 Oneric 2024-01-23 20:10:01 +0100
  • 790b552030 Test both standalone and flag mode for pruning orphaned activities #655 Oneric 2024-02-10 03:03:13 +0100
  • 2fb8ff52d1 Also allow limiting the initial prune_object Oneric 2023-10-23 17:29:02 +0200
  • 2b91278f5e Log number of deleted rows in prune_orphaned_activities Oneric 2023-10-23 01:27:56 +0200
  • 3ac745a5c7 Add standalone prune_orphaned_activities CLI task Oneric 2023-10-23 01:01:07 +0200
  • d1dbdfe085 refactor: move prune_orphaned_activities into own function Oneric 2023-10-23 00:52:34 +0200
  • 086d6100e1 Merge pull request 'Disable busy waits in the default OTP `vm.args` configuration.' (#693) from erincandescent/akkoma:otp-tune-vm-busywait into develop floatingghost 2024-02-19 14:01:14 +0000
  • 3e24210e9f Merge pull request 'Prune old Update activities' (#683) from Oneric/akkoma:db-prune-old-updates into develop floatingghost 2024-02-19 13:59:33 +0000
  • 551ae69541 Merge pull request 'Fix and provide sane defaults for SMTP' (#686) from Oneric/akkoma:smtp-defaults into develop floatingghost 2024-02-19 13:39:15 +0000
  • 37f9626116 Merge pull request 'Docs: reword description for mrf_reject_newly_created_account_notes for more clarity' (#1) from stefan230/akkoma:doc_mrf_reject_acc_notes_patch into doc_mrf_reject_acc_notes YokaiRick 2024-02-17 22:19:32 +0000
  • b4c832471c docs/docs/configuration/cheatsheet.md aktualisiert stefan230 2024-02-17 22:09:47 +0000
  • db49daa4a5 make it clearer what it affects rick 2024-02-17 22:57:56 +0100
  • 718104117f fix link rick 2024-02-17 22:34:55 +0100
  • 12e7d0a25c added doc for mrf_reject_newly_created_account_notes rick 2024-02-17 22:25:12 +0100
  • 1a7839eaf2 Prune old Update activities #683 Oneric 2024-02-09 23:26:23 +0100
  • 1ef8b967d2 test: fix typos affecting remove factory Oneric 2024-02-10 01:46:10 +0100
  • 7a0e27a746 Disable busy waits in the default OTP `vm.args` configuration. #693 Erin Shepherd 2024-02-17 13:21:56 +0100
  • 755c75d8a4 Merge pull request 'Clean up warnings (+fallback metrics)' (#685) from Oneric/akkoma:metrics into develop floatingghost 2024-02-17 11:41:10 +0000
  • 289f93f5a2 Merge pull request 'Return last_status_at as date, not datetime' (#681) from katafrakt/akkoma:fix-last-status-at into develop floatingghost 2024-02-17 11:37:19 +0000
  • 371b258c99 Merge pull request 'Fix SimplePolicy blocking account updates' (#692) from Oneric/akkoma:fix-background_removal into develop floatingghost 2024-02-17 10:34:16 +0000
  • 3b0714c4fd Fix SimplePolicy blocking account updates #692 Oneric 2024-02-17 01:59:50 +0000
  • 34c213f02f Merge pull request 'Federate user profile background' (#682) from Oneric/akkoma:background-federation into develop floatingghost 2024-02-16 21:00:10 +0000
  • e99e2407f3 Add background_removal to SimplePolicy MRF #682 Oneric 2024-02-10 17:27:11 +0100
  • 7622aa27ca Federate user profile background Oneric 2024-02-09 21:03:02 +0100
  • 0ed815b8a1 Merge branch 'followback' into develop FloatingGhost 2024-02-16 13:27:40 +0000
  • c5dcd07e08 Merge pull request 'Fix OpenAPI spec for preferred_frontend endpoint' (#680) from katafrakt/akkoma:fix-openapi-spec-for-preferred-frontend into develop floatingghost 2024-02-16 12:21:00 +0000
  • 874ee73a87 Merge pull request 'Document Akkoma API' (#678) from Oneric/akkoma:doc-akkomapi into develop floatingghost 2024-02-16 12:20:11 +0000
  • a905223837 Merge pull request 'Check permissions on configuration file, not symlink' (#687) from erincandescent/akkoma:config-stat-symlink into develop floatingghost 2024-02-16 12:19:08 +0000
  • cda597a05c doc: fix Akkoma identification name #678 Oneric 2024-02-15 16:02:13 +0100
  • 711043f57d Document bubble timeline API Oneric 2024-02-15 16:01:43 +0100
  • 6bb455702d Document Akkoma API Oneric 2024-01-28 19:49:20 +0100