Commit graph

16986 commits

Author SHA1 Message Date
lain
f25ef1aa7f Merge branch 'stable' into 'develop'
Stable

See merge request pleroma/pleroma!4339
2025-03-11 16:59:48 +00:00
lain
66687bedda Merge branch 'release/2.9.1' into 'stable'
Release/2.9.1

See merge request pleroma/pleroma!4338
2025-03-11 16:04:14 +00:00
Lain Soykaf
5ce612b272 Linting 2025-03-11 18:21:27 +04:00
Lain Soykaf
4c8a8a4b62 Update changelog 2025-03-11 18:06:43 +04:00
Lain Soykaf
0a93a7b0c9 Mix: Update version 2025-03-11 18:04:54 +04:00
Lain Soykaf
3c2b51c7cb Changelog: Add missing changelog entries 2025-03-11 17:57:45 +04:00
Lain Soykaf
2293d0826a Tests: Fix tests. 2025-03-11 17:53:05 +04:00
Lain Soykaf
51c1d6fb2d Containment: Never fetch locally 2025-03-11 16:37:17 +04:00
Lain Soykaf
b0c2ec5fb9 Fetcher Tests: Add tests validating the content-type 2025-03-11 16:15:14 +04:00
Lain Soykaf
adb5cb96d3 Object.Fetcher: Don't do cross-site redirects. 2025-03-11 15:50:17 +04:00
Lain Soykaf
577b7cb061 StealEmojiPolicy: Sanitise emoji names. 2025-03-11 14:59:06 +04:00
Lain Soykaf
c143653364 ReverseProxy: Sanitize content. 2025-03-11 14:18:36 +04:00
Lain Soykaf
d9ae9b676c InstanceStatic: Extra-sanitize emoji 2025-03-11 14:09:31 +04:00
Lain Soykaf
b1309bdb40 More fixes for InstanceStatic 2025-03-10 18:44:17 +04:00
Lain Soykaf
1dd9ba5d6f Sanitize media uploads. 2025-03-10 17:23:21 +04:00
Lain Soykaf
b469b9d9d3 . 2025-03-10 16:48:54 +04:00
Lain Soykaf
edcd816730 Merge branch 'assorted-test-fixes' into secfix 2025-03-10 16:04:46 +04:00
lain
5ffc7d8c9d Merge branch 'develop' into 'develop'
docs: debian_based_en has a trailing "`"

See merge request pleroma/pleroma!4337
2025-03-08 15:47:53 +00:00
Mikka van der Velde
35033b6f3e Edit debian-distro-docs-pleromaBE.fix 2025-03-08 15:34:32 +00:00
Mikka van der Velde
5cf0321bc7 Add new file 2025-03-08 15:33:36 +00:00
Mikka van der Velde
be3bbe5863 Edit debian_based_en.md 2025-03-08 15:29:01 +00:00
lain
906c3ab308 Merge branch 'fix-safezip' into 'develop'
Safezip: Fix test (issue was a difference in file ordering between otp26 and otp27)

See merge request pleroma/pleroma!4336
2025-03-02 21:11:49 +00:00
Lain Soykaf
a184eccde7 Safezip: Fix test (issue was a difference in file ordering between otp26 and otp27) 2025-03-02 23:18:51 +04:00
lain
b2640f0dc4 Merge branch 'pl-fe' into 'develop'
Include my frontend in available frontends

See merge request pleroma/pleroma!4334
2025-03-02 19:11:27 +00:00
mkljczk
7bfa3bf282 Include my frontend in available frontends
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-03-02 17:38:22 +01:00
lain
a7b6d3c1d1 Merge branch 'changelog' into 'develop'
remove changelog entries from changelog.d

See merge request pleroma/pleroma!4335
2025-03-02 15:59:50 +00:00
mkljczk
bc722623b3 remove changelog entries from changelog.d
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-03-02 16:43:34 +01:00
lain
16944eb9da Merge branch 'stable' into 'develop'
2.9.0 mergeback

See merge request pleroma/pleroma!4332
2025-03-01 17:47:12 +00:00
lain
af6d5470d2 Merge branch 'release/2.9.0' into 'stable'
Release/2.9.0

See merge request pleroma/pleroma!4331
2025-03-01 16:41:38 +00:00
Lain Soykaf
cd5f018206 SafeZip Test: Skip failing CI tests for the release (tests work fine locally) 2025-03-01 20:08:19 +04:00
Lain Soykaf
79cbc74aa9 Linting 2025-03-01 19:05:20 +04:00
Lain Soykaf
a24e894b2b Update changelog 2025-03-01 18:14:36 +04:00
Lain Soykaf
e88eb24443 Mix: Bump version to 2.9.0 2025-03-01 17:49:52 +04:00
Lain Soykaf
32acdf0936 Merge branch 'security-2.9' into release/2.9.0 2025-03-01 17:45:28 +04:00
Oneric
13a88bd1a5 Register APNG MIME type
The newest git HEAD of MIME already knows about APNG, but this
hasn’t been released yet. Without this, APNG attachments from
remote posts won’t display as images in frontends.

Fixes: akkoma#657
2025-03-01 17:26:46 +04:00
Lain Soykaf
706bfffcda Linting 2025-03-01 17:16:48 +04:00
Lain Soykaf
88ee385302 Transmogrifier: Strip internal fields 2025-03-01 17:13:47 +04:00
Lain Soykaf
d6a136f823 Config: Deactivate client api by default 2025-03-01 15:49:01 +04:00
Lain Soykaf
4604f2944e Merge branch 'pleroma-ensure-authorized-fetch' into security-2.9 2025-03-01 14:07:02 +04:00
feld
a8e863e0d6 Merge branch 'rich-media-ordering' into 'develop'
Rich Media Parser should use first image found

Closes #3356

See merge request pleroma/pleroma!4329
2025-03-01 02:01:22 +00:00
Mark Felder
ac0882e348 Filter the parsed OpenGraph/Twittercard tags and only retain the ones we intend to use. 2025-02-28 17:24:23 -08:00
feld
b770850903 Merge branch 'retire-mrfs' into 'develop'
Retire MRFs DNSRBL, FODirectReply, and QuietReply

See merge request pleroma/pleroma!4330
2025-03-01 01:12:31 +00:00
Mark Felder
2c9d071aad Retire MRFs DNSRBL, FODirectReply, and QuietReply
DNSRBL was a neat experiment which should live out of tree. It works and could be used to coordinate rules across different servers, but Simple Policy will always be better

FODirectReply and QuietReply have reliability issues as implemented in an MRF. If we want to expose this functionality to admins it should be a setting that overrides the chosen scope during CommonAPI.post instead of trying to rewrite the recipients with an MRF.
2025-02-28 16:43:28 -08:00
Mark Felder
2137b681dc Fix image URLs in TwitterCard parser test
The logic has been changed to ensure we always choose the first image if multiple are specified. This also applies when both OpenGraph and TwitterCard tags are published on a page. We parse for OpenGraph tags first and in this case the website was intentionally serving different images for TwitterCards and OpenGraph.
2025-02-28 15:26:13 -08:00
Mark Felder
cb073a9cd0 Rich Media Parser should use first og:image 2025-02-28 15:12:49 -08:00
feld
63663ac88b Merge branch 'twittercard-image-order' into 'develop'
Fix OpenGraph/TwitterCard meta tag ordering for posts with multiple attachments

See merge request pleroma/pleroma!4328
2025-02-28 22:11:06 +00:00
Mark Felder
7bdeb9a1e5 Fix OpenGraph/TwitterCard meta tag ordering for posts with multiple attachments 2025-02-28 13:36:00 -08:00
tusooa
ca3c2a4ffa Verify a local Update sent through AP C2S so users can only update their own objects 2025-02-28 13:01:06 +04:00
Lain Soykaf
bf134664b4 PackTest: Add test for skipping emoji 2025-02-28 12:53:15 +04:00
Lain Soykaf
2fcb90f369 Emoji, Pack, Backup, Frontend: Use SafeZip 2025-02-27 17:06:15 +04:00