akkoma/lib
William Pitcock 0159a6dbe9 router: require oauth_read for searching
Search calls are generally expensive and allow unauthenticated users to
crawl the instance for user profiles or posts which contain specified
keywords.  An adversary can build a distributed search engine which not
only will consume significant instance resources, but also can be used
for undesirable purposes such as datamining.

Accordingly, require authenticated access to use the search API endpoints.
This acts as a nice balance as it allows guest users to make use of most
functionality available in Pleroma FE while ensuring that Pleroma
instances are reasonably protected from resource exhaustion.  It also
removes Pleroma as a potential vector in distributed search engines.
2019-05-29 10:58:45 +00:00
..
mix/tasks Disable timeouts for object pruning query 2019-05-22 20:10:52 +03:00
pleroma router: require oauth_read for searching 2019-05-29 10:58:45 +00:00
healthcheck.ex Feature/826 healthcheck endpoint 2019-04-22 07:19:53 +00:00
jason_types.ex Format the code. 2018-03-30 15:01:53 +02:00
transports.ex Format the code. 2018-03-30 15:01:53 +02:00
xml_builder.ex xml builder: properly escape quotes 2019-05-12 19:04:37 +00:00