9241 commits

Author	SHA1	Message	Date
NEETzsche	e216603477	Change url to externalLink as requested by hj here: https://shigusegubu.club/notice/AcIjZjackKAt6e522a	2023-11-29 07:55:44 -07:00
lain	1955b3c557	Merge branch 'vips' into 'develop' ... Replace ImageMagick with Vips See merge request pleroma/pleroma!3771	2023-11-29 06:03:37 +00:00
Lain Soykaf	ccc2adee41	Linting	2023-11-28 13:13:43 +04:00
Lain Soykaf	b3214be32f	AnayzeMetadata: Fix error case that would never match	2023-11-28 12:33:54 +04:00
Lain Soykaf	03db495e1d	AnalyzeMetadata: Switch to rinpatch_blurhash	2023-11-28 12:23:41 +04:00
lain	ef7bda61ad	Merge branch 'promex' into 'develop' ... Switch to PromEx for prometheus metrics See merge request pleroma/pleroma!3967	2023-11-28 07:50:16 +00:00
Lain Soykaf	4ef56c5b65	ActivityPub.Utils: Only treat object ids as valid while stripping	2023-11-27 18:44:11 +04:00
NEETzsche	27df2c0ce6	Fix #strip_report_status_data	2023-11-27 17:56:43 +04:00
Mark Felder	299c548b12	Prevent a blurhash failure from breaking all metadata collection	2023-11-23 16:15:53 -05:00
NEETzsche	510a7b64f1	Add optional URL value for scrobbles	2023-11-23 04:51:51 -07:00
HJ	4ebfc011fc	Merge branch 'favicon' into 'develop' ... Make favicon configurable, embed favicon and manifest in server-generated meta See merge request pleroma/pleroma!3963	2023-11-19 08:52:37 +00:00
feld	906b121a10	Merge branch 'develop' into 'vips' ... # Conflicts: # mix.exs	2023-11-17 16:50:36 +00:00
Mark Felder	88cc7e6a04	Resize images to 100 pixels before hashing	2023-11-17 11:06:31 -05:00
Mark Felder	0c6a54b37c	Upload.Filter.AnalyzeMetadata: Blurhash with a Rust NIF, and use Vix to retrieve image metadata	2023-11-17 10:26:00 -05:00
Haelwenn (lanodan) Monnier	8ac7cc98c1	MastoAPI AccountView: Change last_status_at to be a date ... Changed in Mastodon 3.1.0 with: https://github.com/tootsuite/mastodon/pull/12966	2023-11-16 15:52:01 +01:00
Haelwenn (lanodan) Monnier	5d3e145dc4	RedirectController: Unify server-generated-meta insertion code	2023-11-14 11:06:36 +01:00
Henry Jameson	a5aa8ea796	Add support for configuring a favicon and embed PWA manifest in server-generated-meta	2023-11-14 11:05:23 +01:00
Haelwenn (lanodan) Monnier	66f5ae0c5a	router: Make /federation_status publicly available	2023-11-14 10:48:30 +01:00
Haelwenn	bf2d6abaf2	Merge branch 'healthcheck-disabled-error' into 'develop' ... TwitterAPI: Return proper error when healthcheck is disabled See merge request pleroma/pleroma!3953	2023-11-14 09:41:26 +00:00
Mark Felder	a4b6e5613f	Revert "Add Pleroma.Upload.Filter.HeifToJpeg based on vips" ... This reverts commit 31d4448ee6. This functionality is not reliably working with vips/vix due to codec patent junk	2023-11-13 15:41:39 -05:00
Mark Felder	481b6ac0d5	Add Pleroma.Upload.Filter.HeifToJpeg based on vips	2023-11-13 15:41:39 -05:00
Mark Felder	13baba90f6	Replace ImageMagick with Vips for Media Preview Proxy	2023-11-13 15:41:39 -05:00
Mark Felder	66cb3294ed	Switch to PromEx for prometheus metrics ... Recommending use of the separate HTTP server for exposing the metrics and securing it externally on your firewall or reverse proxy. It will listen on port 4021 by default.	2023-11-13 15:34:59 -05:00
lain	752bc168f6	Merge branch 'quotes-count' into 'develop' ... Count and display post quotes See merge request pleroma/pleroma!3956	2023-11-12 13:38:09 +00:00
marcin mikołajczak	9a063deacc	Count and display post quotes	2023-11-12 13:38:08 +00:00
lain	5f19fbc5a9	Merge branch 'phoenix1.7' into 'develop' ... Update to Phoenix 1.7 See merge request pleroma/pleroma!3900	2023-11-12 13:34:27 +00:00
Lain Soykaf	3d62c71edf	Credo fixes.	2023-11-12 17:13:27 +04:00
Lain Soykaf	59018d73c3	B Meilisearch: Update to current API responses.	2023-11-12 16:43:50 +04:00
Lain Soykaf	a1a25029da	B DatabaseSearch: Fix local-only search.	2023-11-12 16:19:54 +04:00
Lain Soykaf	d3f8950588	B MeiliSearch, SearchIndexingWorker: Use Config.Getting, make tests async.	2023-11-12 14:49:50 +04:00
Lain Soykaf	c1402af293	B Getting: Add default implementation, delegate, prepare test support.	2023-11-12 14:49:15 +04:00
Lain Soykaf	0c5cc51983	Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into pleroma-meilisearch	2023-11-12 13:53:18 +04:00
Marcin Mikołajczak	1e9333a9aa	Merge remote-tracking branch 'origin/develop' into instance-v2	2023-11-08 20:46:57 +01:00
Mark Felder	e23672d82f	Ensure benchee doesn't run unless we are executing benchmarks	2023-11-08 12:44:57 -05:00
Mark Felder	a0e08c6ec2	Merge branch 'develop' into phoenix1.7	2023-11-07 16:05:04 -05:00
Mark Felder	bf426c53b4	Fix digest email processing, consolidate Oban queues ... The email related jobs can all share a single Oban queue	2023-11-07 15:14:36 -05:00
marcin mikołajczak	c62696c8e7	Support /authorize-interaction route used by Mastodon ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-11-02 13:47:23 +01:00
marcin mikołajczak	c6cedbb810	InstanceV2: skip auth ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-10-28 00:07:18 +02:00
tusooa	b748efe66a	Fix mentioning punycode domains when using Markdown	2023-10-16 21:35:25 -04:00
tusooa	840dd01035	Fix duplicated schema names	2023-10-15 17:20:26 -04:00
tusooa	32de0683c4	Fix unsubscribe event type in streaming doc	2023-10-15 17:20:26 -04:00
tusooa	c13f0a8460	Add meta-info and query strings to streaming doc	2023-10-15 17:20:26 -04:00
tusooa	f393a15dd1	Fix some specs about server-sent events in streaming	2023-10-15 17:20:26 -04:00
tusooa	8829dcaee4	Document client-sent events in streaming	2023-10-15 17:20:25 -04:00
tusooa	dcef33f5f0	Document server-sent events of streaming	2023-10-15 17:20:25 -04:00
tusooa	844d1a14e0	Start writing api docs for streaming endpoint	2023-10-15 17:20:25 -04:00
tusooa	eebc605bc2	Clear up debug statement	2023-10-15 17:20:25 -04:00
tusooa	a348c2e4dd	Use pleroma: instead of pleroma. for ws events	2023-10-15 17:20:25 -04:00
tusooa	7d005e8c93	Return stream attribute in server-sent events	2023-10-15 17:20:23 -04:00
tusooa	21395aa509	Allow authenticating via client-sent events	2023-10-15 17:19:49 -04:00
tusooa	273cda63ad	Allow subscribing to streams	2023-10-15 17:19:49 -04:00
tusooa	2b5636bf12	Allow unified streaming endpoint	2023-10-15 17:19:40 -04:00
Haelwenn (lanodan) Monnier	2f6fc6a7ab	TwitterAPI: Return proper error when healthcheck is disabled	2023-09-24 23:32:17 +02:00
tusooa	08608afca5	Fix quote_visible attribute	2023-09-13 19:20:33 -04:00
tusooa	a8b2f9205d	Expose quote_id parameter on the api	2023-09-13 19:20:32 -04:00
tusooa	875b46d97d	Do not mention original poster when quoting	2023-09-13 19:20:32 -04:00
tusooa	87353e5ad1	Fix config descriptions for mrf inline quote	2023-09-13 19:20:32 -04:00
tusooa	8b98a98dfb	Make InlineQuotePolicy history aware	2023-09-13 19:20:32 -04:00
tusooa	e349e92a44	Add mrf to force link tag of quoting posts	2023-09-13 19:20:30 -04:00
tusooa	479a6f11db	Keep incoming Link tag	2023-09-13 19:19:44 -04:00
tusooa	e9cd004ba1	Parse object link as quoteUrl	2023-09-13 19:19:42 -04:00
tusooa	163e563733	Allow more flexibility in InlineQuotePolicy	2023-09-13 19:19:05 -04:00
tusooa	9bcec87aba	Allow local quote and private self-quote	2023-09-13 19:19:05 -04:00
tusooa	b0a7e795e7	Unify logic for normalizing quoteUri	2023-09-13 19:19:05 -04:00
Alex Gleason	f9697e68c2	InlineQuotePolicy: skip objects which already have an .inline-quote span	2023-09-13 19:19:05 -04:00
Alex Gleason	79fca39faf	Actually, don't send _misskey_quote anymore	2023-09-13 19:19:05 -04:00
Alex Gleason	4075eecca0	InlineQuotePolicy: improve the way Markdown quotes are displayed by other software	2023-09-13 19:19:05 -04:00
Alex Gleason	817e308c0d	Handle Fedibird's new quoteUri field	2023-09-13 19:19:05 -04:00
Alex Gleason	3c8319fe9f	Transmogrifier: federate quotes with _misskey_quote field	2023-09-13 19:19:04 -04:00
Alex Gleason	cf8e425883	StatusView: return quote post inside a reblog	2023-09-13 19:19:04 -04:00
Alex Gleason	bee7e41959	InlineQuotePolicy: don't add line breaks to markdown posts	2023-09-13 19:19:04 -04:00
Alex Gleason	74e0a4555f	StatusView: add quote_visible param	2023-09-13 19:19:04 -04:00
Alex Gleason	6f11f11519	StatusView: fix quote visibility	2023-09-13 19:19:04 -04:00
Alex Gleason	59326247aa	CommonAPI: disallow quoting private posts through the API	2023-09-13 19:19:04 -04:00
Alex Gleason	57ef1d1211	Add InlineQuotePolicy to force quote URLs inline	2023-09-13 19:19:04 -04:00
Alex Gleason	1f19dd76f6	ActivityDraft: mix format, defensive actor ID	2023-09-13 19:19:04 -04:00
Alex Gleason	54a9897938	ActivityDraft: mention the OP of a quoted post	2023-09-13 19:19:04 -04:00
Alex Gleason	80ab2572a4	Return quote_url through the API, don't render quotes more than 1 level deep	2023-09-13 19:19:04 -04:00
Alex Gleason	5716f88a1d	InstanceView: add "quote_posting" feature	2023-09-13 19:19:03 -04:00
Alex Gleason	9600973917	mix format	2023-09-13 19:19:03 -04:00
Alex Gleason	d4fea8b559	ActivityDraft: allow quoting	2023-09-13 19:19:03 -04:00
Alex Gleason	6ac19c3999	ActivityDraft: create quote posts	2023-09-13 19:19:03 -04:00
Alex Gleason	0d9c443e51	StatusView: render the whole quoted status	2023-09-13 19:19:03 -04:00
Alex Gleason	ce5eb31723	StatusView: show quoted posts through the API, probably	2023-09-13 19:19:03 -04:00
Alex Gleason	cc4badaf60	Transmogrifier: fix quoteUrl here too	2023-09-13 19:19:03 -04:00
Alex Gleason	b022d6635d	Transmogrifier: fetch quoted post	2023-09-13 19:19:03 -04:00
Alex Gleason	795736af16	ObjectValidators: improve quoteUrl compatibility	2023-09-13 19:19:03 -04:00
Alex Gleason	31eb3dc245	ObjectValidators: accept "quoteUrl" field	2023-09-13 19:19:02 -04:00
marcin mikołajczak	28ef5ebd3c	Update InstanceView.features ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-09-07 15:00:24 +02:00
Mint	1afde067b1	CommonAPI: Prevent users from accessing media of other users	2023-09-03 10:41:37 +02:00
tusooa	3d09bc320e	Make lint happy	2023-08-30 20:36:52 -04:00
Haelwenn	1e685c8302	Merge branch 'csp-flash' into 'develop' ... allow https: so that flash works across instances without need for media proxy See merge request pleroma/pleroma!3879	2023-08-16 13:37:49 +00:00
Haelwenn	d838d1990b	Apply lanodan's suggestion(s) to 1 file(s)	2023-08-16 13:34:32 +00:00
marcin mikołajczak	79e46ce73f	InstanceView: Add common_information function ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-08-11 13:57:22 +02:00
marcin mikołajczak	9effa24f30	Implement api/v2/instance route ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-08-11 00:08:05 +02:00
mae	48b1e9bdc7	Completely disable xml entity resolution	2023-08-05 14:17:04 +02:00
Mae	ca0859b90f	Prevent XML parser from loading external entities	2023-08-04 22:35:13 -04:00
Haelwenn (lanodan) Monnier	69caedc591	instance gen: Reduce permissions of pleroma directories and config files	2023-08-04 09:50:28 +02:00
Haelwenn (lanodan) Monnier	8cc8100120	Config: Restrict permissions of OTP config file	2023-08-04 09:50:28 +02:00
Mark Felder	2c79509453	Resolve information disclosure vulnerability through emoji pack archive download endpoint ... The pack name has been sanitized so an attacker cannot upload a media file called pack.json with their own handcrafted list of emoji files as arbitrary files on the filesystem and then call the emoji pack archive download endpoint with a pack name crafted to the location of the media file they uploaded which tricks Pleroma into generating a zip file of the target files the attacker wants to download. The attack only works if the Pleroma instance does not have the AnonymizeFilename upload filter enabled, which is currently the default. Reported by: graf@poast.org	2023-08-04 08:40:27 +02:00