Lain Soykaf
32acdf0936
Merge branch 'security-2.9' into release/2.9.0
2025-03-01 17:45:28 +04:00
Lain Soykaf
706bfffcda
Linting
2025-03-01 17:16:48 +04:00
Lain Soykaf
88ee385302
Transmogrifier: Strip internal fields
2025-03-01 17:13:47 +04:00
Lain Soykaf
4604f2944e
Merge branch 'pleroma-ensure-authorized-fetch' into security-2.9
2025-03-01 14:07:02 +04:00
feld
a8e863e0d6
Merge branch 'rich-media-ordering' into 'develop'
...
Rich Media Parser should use first image found
Closes #3356
See merge request pleroma/pleroma!4329
2025-03-01 02:01:22 +00:00
Mark Felder
ac0882e348
Filter the parsed OpenGraph/Twittercard tags and only retain the ones we intend to use.
2025-02-28 17:24:23 -08:00
Mark Felder
2c9d071aad
Retire MRFs DNSRBL, FODirectReply, and QuietReply
...
DNSRBL was a neat experiment which should live out of tree. It works and could be used to coordinate rules across different servers, but Simple Policy will always be better
FODirectReply and QuietReply have reliability issues as implemented in an MRF. If we want to expose this functionality to admins it should be a setting that overrides the chosen scope during CommonAPI.post instead of trying to rewrite the recipients with an MRF.
2025-02-28 16:43:28 -08:00
Mark Felder
cb073a9cd0
Rich Media Parser should use first og:image
2025-02-28 15:12:49 -08:00
Mark Felder
7bdeb9a1e5
Fix OpenGraph/TwitterCard meta tag ordering for posts with multiple attachments
2025-02-28 13:36:00 -08:00
Lain Soykaf
bf134664b4
PackTest: Add test for skipping emoji
2025-02-28 12:53:15 +04:00
Lain Soykaf
2fcb90f369
Emoji, Pack, Backup, Frontend: Use SafeZip
2025-02-27 17:06:15 +04:00
Oneric
0f5ac7e86d
Add SafeZip module
...
This will replace all the slightly different safety workarounds at
different ZIP handling sites and ensure safety is actually consistently
enforced everywhere while also making code cleaner and easiert to
follow.
2025-02-27 14:19:50 +04:00
lain
6f48ade417
Merge branch 'post-languages' into 'develop'
...
Allow to specify post language
See merge request pleroma/pleroma!3940
2025-02-22 12:42:42 +00:00
lain
801a2256f4
Merge branch 'follow-hashtags' into 'develop'
...
Hashtag following (from Akkoma)
See merge request pleroma/pleroma!4307
2025-02-22 12:26:18 +00:00
Mark Felder
f26509bf16
Fix missing check for domain presence in rich media ignore_host configuration
2025-02-21 17:38:55 -08:00
mkljczk
d905fa0ad8
Allow incoming "Listen" activities
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-02-17 21:28:07 +01:00
mkljczk
04af8bfd9c
credo
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-02-17 18:26:24 +01:00
mkljczk
120fbbc97e
Include contentMap in outgoing posts
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-02-17 17:55:03 +01:00
mkljczk
ea01b5934f
Merge remote-tracking branch 'origin/develop' into post-languages
2025-02-17 17:36:02 +01:00
Lain Soykaf
81ab906466
AnalyzeMetadata: Don't crash on grayscale image blurhash
2025-01-30 12:18:20 +04:00
mkljczk
8cd7716872
Fix Mastodon incoming edits with inlined "likes"
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-01-28 22:47:42 +01:00
mkljczk
f2c612d4ae
Merge branch 'actor-published' into 'develop'
...
Include "published" in actor view
See merge request pleroma/pleroma!4312
2025-01-21 13:03:35 +00:00
Haelwenn
4461cc984d
Merge branch 'proxy-redirect' into 'develop'
...
MediaProxyController: Use 301 for permanent redirects
See merge request pleroma/pleroma!4313
2025-01-21 09:31:17 +00:00
Lain Soykaf
2226171890
MediaProxyController: Use 301 for permanent redirects
2025-01-21 12:24:56 +04:00
mkljczk
38b17933e1
Include "published" in actor view
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-01-19 16:26:46 +01:00
mkljczk
855294bb3d
Link to exported outbox/followers/following collections in backup actor.json
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-01-09 12:58:51 +01:00
mkljczk
36b71733a0
fix alias ordering
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2024-12-30 21:01:41 +01:00
mkljczk
f565cf2b5b
update spec
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2024-12-30 18:11:21 +01:00
FloatingGhost
bdb9f888d7
Add /api/v1/followed_tags
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2024-12-30 17:57:57 +01:00
floatingghost
c94c6eac22
Remerge of hashtag following ( #341 )
...
this time with less idiot
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/341
Signed-off-by: mkljczk <git@mkljczk.pl>
2024-12-30 17:56:18 +01:00
tusooa
b51f5a84eb
Verify a local Update sent through AP C2S so users can only update their own objects
2024-12-09 12:43:08 +04:00
kPherox
3f98c8bd1b
fix: skip directory entries
...
In OTP 27.1 or later, `:zip.unzip/2` without `:skip_directories` option returns directory entries.
However in OTP 26, passing `:skip_directories` returns a `:bad_option` error, so this option is not available for compatibility.
2024-11-27 17:55:33 +09:00
lain
d92d6132f2
Merge branch 'meilisearch/misc-fixes' into 'develop'
...
Miscellaneous fixes for Meilisearch
See merge request pleroma/pleroma!4296
2024-11-21 14:29:26 +00:00
Lain Soykaf
551534f3ee
B ReleaseTasks: Fix task module finding.
2024-11-21 16:07:09 +04:00
Mint
da7132caba
Remove unused import
2024-11-21 02:40:27 +03:00
Mint
d65f768b59
Meilisearch: stop attempting to index posts with nil date
2024-11-21 02:14:55 +03:00
Mint
c9f9ec04c8
Meilisearch: use PUT method for indexing Mix task
...
See https://github.com/meilisearch/meilisearch/issues/2619
2024-11-21 02:13:10 +03:00
lain
dcb0c47773
Merge branch 'mastodon-websocket-fix' into 'develop'
...
Fix Mastodon WebSocket authentication
See merge request pleroma/pleroma!4206
2024-11-13 08:22:44 +00:00
lain
62bbed1e58
Merge branch 'token-view-scopes' into 'develop'
...
Include session scopes in TokenView
See merge request pleroma/pleroma!4273
2024-11-12 11:18:10 +00:00
lain
4626a9280a
Merge branch 'activity-pub-metadata' into 'develop'
...
Add metadata provider for ActivityPub alternate links
See merge request pleroma/pleroma!4286
2024-11-12 10:49:36 +00:00
Lain Soykaf
2baa9b0072
Merge branch 'develop' into pleroma-token-view-scopes
2024-11-12 14:33:30 +04:00
lain
8b31316d2d
Merge branch 'tusooa/se-opt-out' into 'develop'
...
Fix nonexisting user will not generate metadata for search engine opt-out
Closes #3329
See merge request pleroma/pleroma!4279
2024-11-12 10:24:28 +00:00
Lain Soykaf
5b3e4cf49b
B Providers/ActivityPub: Ensure that nothing explodes on unexpected input.
2024-11-12 14:22:02 +04:00
lain
91b26c683a
Merge branch 'fix/vapid_keyword_fallback' into 'develop'
...
push: make vapid_config fallback to empty array
See merge request pleroma/pleroma!4276
2024-11-12 10:01:05 +00:00
lain
6941c47ac8
Merge branch 'develop' into 'tusooa/se-opt-out'
...
# Conflicts:
# lib/pleroma/web/metadata/providers/feed.ex
2024-11-12 09:58:28 +00:00
lain
ee3ab8b625
Merge branch 'atom-tag' into 'develop'
...
Metadata: Do not include .atom feed links for remote accounts
See merge request pleroma/pleroma!4281
2024-11-12 09:44:29 +00:00
Mark Felder
d2de251c4d
Pleroma.Upload.Filter.Dedupe: sharding directory structure
...
Dedupe now uses a three-level sharding directory structure to improve performance when many files are uploaded and stored on a filesystem instead of an object store. (note: Minio still affected as it still uses a traditional filesystem)
This does not help if you already have hundreds of thousands of files uploaded. The media URLs are permanently part of the activity so the files cannot be relocated. A motivated user could write a tool to move the files and perhaps write an Nginx or equivalent redirect to make the files still accessible, but that is beyond the scope of this change.
2024-10-29 16:00:18 -04:00
Mark Felder
7d5ef81737
Fix /api/v2/media returning the wrong status code for media processed synchronously
...
The API should return a 202 only if data cannot be returned yet and a followup GET /api/v1/media/:id should be called to retrieve it. This is something Mastodon does when it needs to transcode large media files. It does not apply to Pleroma and causes apps to waste an API call when posting a status which causes apps to appear to hang on higher latency environments, such as on mobile networks.
https://docs.joinmastodon.org/methods/media/#v2
2024-10-27 21:52:42 -04:00
marcin mikołajczak
60ec42cb9c
Add metadata provider for ActivityPub alternate links
...
Signed-off-by: marcin mikołajczak <git@mkljczk.pl>
2024-10-12 23:45:18 +02:00
feld
639016bdee
Merge branch 'refactor-change-password' into 'develop'
...
LDAP: permit password changing
See merge request pleroma/pleroma!4285
2024-10-11 20:48:20 +00:00
