cheerfulstoic/akkoma
1
0
Fork 0
forked from AkkomaGang/akkoma
Code Issues Pull requests Projects Releases Packages Wiki Activity
akkoma/lib/pleroma
History
rinpatch 6ca709816f Fix object spoofing vulnerability in attachments 
Validate the content-type of the response when fetching an object,
according to https://www.w3.org/TR/activitypub/#x3-2-retrieving-objects.

content-type headers had to be added to many mocks in order to support
this, some of this was done with a regex. While I did go over the
resulting files to check I didn't modify anything unrelated, there is a
 possibility I missed something.

Closes pleroma#1948
2020-11-12 15:25:33 +03:00
..
activity Remote Timeline: add Streaming support 2020-10-08 20:07:03 -05:00
bbs alias alphabetically order 2020-10-13 16:43:59 +03:00
captcha Use Pleroma.HTTP instead of Tesla 2020-11-01 12:05:39 +03:00
chat ChatController: Add last_read_id option to mark_as_read. 2020-06-07 15:38:33 +02:00
config migration and warning for RemoteIp plug rename 2020-10-13 16:44:04 +03:00
conversation Merge branch 'issue/2069' into 'develop' 2020-10-29 23:39:15 +00:00
docs config descriptions for custom MRF policies 2020-11-10 19:20:14 +03:00
ecto_type Add new Emoji Ecto.Type and fix emoji in Question 2020-09-01 08:34:57 +02:00
emails AdminEmail: Use AP id as user url. 2020-11-04 17:12:47 +01:00
emoji Use Pleroma.HTTP instead of Tesla 2020-11-01 12:05:39 +03:00
gopher using atom keys in search params 2020-07-17 18:06:05 +03:00
gun other files consistency 2020-10-13 16:38:19 +03:00
helpers [#1668] Restricted access to app metrics endpoint by default. Added ability to configure IP whitelist for this endpoint. 2020-10-18 21:22:21 +03:00
http changes after rebase 2020-10-13 16:44:03 +03:00
instances federation_status: New endpoint showing unreachable instances 2020-10-16 01:14:04 +02:00
mfa expire mfa tokens through Oban 2020-09-10 16:01:19 +03:00
migration_helper added notification constraints 2020-09-14 14:08:12 +03:00
object Fix object spoofing vulnerability in attachments 2020-11-12 15:25:33 +03:00
reverse_proxy other files consistency 2020-10-13 16:38:19 +03:00
telemetry Add missing Copyright headers 2020-10-12 12:00:50 -05:00
tesla/middleware changes after rebase 2020-10-13 16:44:03 +03:00
tests alias alphabetically order 2020-10-13 16:43:59 +03:00
upload Merge branch 'fix/upload-filter-exiftool-webp' into 'develop' 2020-09-08 19:45:44 +03:00
uploaders UploadedMedia module name 2020-10-13 16:42:51 +03:00
user Merge remote-tracking branch 'origin/develop' into feature/account-export 2020-10-30 19:34:02 +04:00
web Merge branch 'title-injection-change' into 'develop' 2020-11-12 08:50:26 +00:00
workers Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into feature/expire-mutes 2020-11-04 16:51:42 +01:00
activity.ex Permit fetching individual reports with notes preloaded 2020-11-02 13:06:59 -06:00
application.ex Add idempotency_key to the chat_message entity. 2020-10-31 05:50:59 +03:00
application_requirements.ex [#3031] Refactoring: moved system commands checks to ApplicationRequirements. 2020-09-29 16:28:06 +03:00
bookmark.ex
captcha.ex other files consistency 2020-10-13 16:38:19 +03:00
chat.ex Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into issue/2115 2020-09-22 17:13:46 +02:00
clippy.ex
config.ex [#2046] Defaulted pleroma/restrict_unauthenticated basing on instance privacy setting (i.e. restrict on private instances only by default). 2020-08-14 20:55:45 +03:00
config_db.ex other files consistency 2020-10-13 16:38:19 +03:00
constants.ex static-fe.css: Restore and move to /priv/static/static-fe 2020-06-12 20:42:43 +03:00
conversation.ex remove unread_conversation_count from User 2020-09-01 09:37:08 +03:00
counter_cache.ex Set sum types in query 2020-05-10 09:13:24 +03:00
delivery.ex
earmark_renderer.ex
ecto_enums.ex
emoji-data.txt
emoji.ex added tests 2020-08-24 15:01:45 +03:00
filter.ex renaming back and reject nil on create 2020-07-06 09:30:42 +03:00
following_relationship.ex relay fix for admin-fe 2020-08-19 08:41:39 +03:00
formatter.ex Revert "Merge branch 'revert-2b5d9eb1' into 'develop'" 2020-07-21 22:18:17 +00:00
gun.ex other files consistency 2020-10-13 16:38:19 +03:00
healthcheck.ex healthcheck: report real amount of memory allocated by beam 2020-05-10 02:11:33 +03:00
html.ex Merge branch 'fix/rich-media-fake-statuses' into 'develop' 2020-09-08 13:56:42 +03:00
http.ex other files consistency 2020-10-13 16:38:19 +03:00
instances.ex federation_status: New endpoint showing unreachable instances 2020-10-16 01:14:04 +02:00
job_queue_monitor.ex fix job monitor 2020-08-11 22:06:33 +03:00
jwt.ex Add missing Copyright headers 2020-10-12 12:00:50 -05:00
keys.ex
list.ex
maintenance.ex Abstract out the database maintenance. I'd like to use this from AdminFE too. 2020-05-27 16:40:51 -05:00
maps.ex Create Pleroma.Maps.put_if_present(map, key, value, value_fun // &{:ok, &1}) 2020-06-05 14:48:02 +00:00
marker.ex
mfa.ex copyright update 2020-05-18 15:15:51 +03:00
moderation_log.ex Merge branch 'develop' into feature/account-export 2020-10-14 15:27:15 -05:00
notification.ex Notification: Small refactor. 2020-08-31 11:02:54 +02:00
object.ex Fix linting. 2020-08-05 15:40:32 +02:00
object_tombstone.ex
otp_version.ex
pagination.ex [#1873] Fixes missing :offset pagination param support. Added pagination support for hashtags search. 2020-06-19 16:14:06 +03:00
password_reset_token.ex
registration.ex
release_tasks.ex
repo.ex RepoStreamer.chunk_stream -> Repo.chunk_stream 2020-09-16 09:47:18 +03:00
report_note.ex
reverse_proxy.ex other files consistency 2020-10-13 16:38:19 +03:00
scheduled_activity.ex Add OpenAPI spec for StatusController 2020-05-13 00:25:21 +04:00
signature.ex Federate data through persistent websocket connections 2020-09-18 11:58:22 +00:00
stats.ex don't run update in tests 2020-09-09 10:48:18 +03:00
thread_mute.ex
upload.ex Merge branch 'develop' into feature/gen-magic 2020-09-10 16:05:22 -05:00
user.ex Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into feature/expire-mutes 2020-11-04 16:51:42 +01:00
user_invite_token.ex
user_relationship.ex [#2456] Added support for embed_relationships param, nailed down endpoints which should support it. Fixed :source_mutes relationships subset fetching. 2020-05-12 19:14:35 +03:00
utils.ex added tests 2020-08-24 15:01:45 +03:00
web.ex Merge branch 'develop' into chore/elixir-1.11 2020-10-13 09:54:53 -05:00
xml_builder.ex more files renamings 2020-10-13 16:38:19 +03:00