Mutex/akkoma
1
0
Fork 0
forked from AkkomaGang/akkoma
Code Issues Pull requests Projects Releases Packages Wiki Activity
akkoma/lib/pleroma/web
History
rinpatch d9c0650ff9 Mastodon API: Fix lists leaking private posts 
Our previous list visibility resolver grabbed posts if either follower
collection of the user in a list who is followed is in `to` or if
follower collection of the user in a list was in `cc`. This not only
missed unlisted posts but also lead to leaking private posts when
`fix_explicit_addressing` mistakingly started putting follower collections
to `cc` (also fixed in this MR).

Reported by @kurisu@iscute.moe via a DM
2019-05-31 15:25:17 +03:00
..
activity_pub Mastodon API: Fix lists leaking private posts 2019-05-31 15:25:17 +03:00
admin_api Add Reports to Admin API 2019-05-16 19:09:18 +00:00
auth differences_in_mastoapi_responses.md: fullname & bio are optionnal 2019-05-13 18:35:45 +00:00
channels Use User.get_cached* everywhere 2019-04-22 07:20:43 +00:00
common_api add Changelog entry 2019-05-17 23:00:14 +00:00
federator remove @websub and @ostatus module-level constants 2019-05-25 04:43:11 +00:00
mastodon_api Default search limit should be 40 2019-05-29 08:06:26 -05:00
media_proxy Add mediaproxy whitelist capability 2019-04-25 18:11:47 -05:00
metadata typo fix 2019-04-19 07:50:21 +00:00
mongooseim Linting. 2019-05-17 18:32:30 +02:00
nodeinfo Keep nodeinfo available when not federating 2019-05-25 08:15:12 +08:00
oauth [#699] add worker to clean expired oauth tokens 2019-05-22 15:44:50 +00:00
ostatus kill @httpoison 2019-05-25 04:24:21 +00:00
push WebPush: Use Object.normalize, rewrite tests so they test reality. 2019-04-29 18:15:30 +02:00
rich_media rich media: suppress link previews if post is marked as sensitive 2019-05-17 18:49:43 +00:00
salmon kill @httpoison 2019-05-25 04:24:21 +00:00
templates Merge branch '923_oauth_consumer_refactoring_ci' into 'develop' 2019-04-19 07:49:26 +00:00
twitter_api Add virtual :thread_muted? field 2019-05-21 00:35:46 +08:00
views logging: only return ISE reasons in API responses when in dev or test mode 2019-02-20 17:36:47 +00:00
web_finger kill @httpoison 2019-05-25 04:24:21 +00:00
websub kill @httpoison 2019-05-25 04:24:21 +00:00
xml update copyright years to 2019 2018-12-31 15:41:47 +00:00
chat_channel.ex [Credo] Remove parentesis on argument-less functions 2019-03-13 04:26:56 +01:00
controller_helper.ex Refactoring functions for dealing with oauth scopes. 2019-05-08 10:52:13 +00:00
endpoint.ex Move the Cache Control header test to its own file 2019-05-24 20:33:55 +00:00
gettext.ex update copyright years to 2019 2018-12-31 15:41:47 +00:00
metadata.ex Use object instead of activity for metadata 2019-01-18 09:32:52 +03:00
oauth.ex Refactoring functions for dealing with oauth scopes. 2019-05-08 10:52:13 +00:00
rel_me.ex Add with_body: true to requests relying on max_body: val 2019-04-12 00:16:33 +07:00
router.ex Revert "Merge branch 'feature/search-authenticated-only' into 'develop'" 2019-05-29 22:10:16 +00:00
streamer.ex Credo fixes. 2019-05-03 13:53:17 +02:00
uploader_controller.ex Make credo happy 2019-02-09 14:59:20 +01:00
web.ex Made auth customization be runtime-configurable. 2019-02-28 13:00:54 +03:00