Lain Soykaf
5ce612b272
Linting
2025-03-11 18:21:27 +04:00
Lain Soykaf
51c1d6fb2d
Containment: Never fetch locally
2025-03-11 16:37:17 +04:00
Lain Soykaf
adb5cb96d3
Object.Fetcher: Don't do cross-site redirects.
2025-03-11 15:50:17 +04:00
Lain Soykaf
577b7cb061
StealEmojiPolicy: Sanitise emoji names.
2025-03-11 14:59:06 +04:00
Lain Soykaf
c143653364
ReverseProxy: Sanitize content.
2025-03-11 14:18:36 +04:00
Lain Soykaf
d9ae9b676c
InstanceStatic: Extra-sanitize emoji
2025-03-11 14:09:31 +04:00
Lain Soykaf
b1309bdb40
More fixes for InstanceStatic
2025-03-10 18:44:17 +04:00
Lain Soykaf
1dd9ba5d6f
Sanitize media uploads.
2025-03-10 17:23:21 +04:00
Lain Soykaf
b469b9d9d3
.
2025-03-10 16:48:54 +04:00
Lain Soykaf
edcd816730
Merge branch 'assorted-test-fixes' into secfix
2025-03-10 16:04:46 +04:00
Lain Soykaf
79cbc74aa9
Linting
2025-03-01 19:05:20 +04:00
Lain Soykaf
32acdf0936
Merge branch 'security-2.9' into release/2.9.0
2025-03-01 17:45:28 +04:00
Lain Soykaf
706bfffcda
Linting
2025-03-01 17:16:48 +04:00
Lain Soykaf
88ee385302
Transmogrifier: Strip internal fields
2025-03-01 17:13:47 +04:00
Lain Soykaf
4604f2944e
Merge branch 'pleroma-ensure-authorized-fetch' into security-2.9
2025-03-01 14:07:02 +04:00
feld
a8e863e0d6
Merge branch 'rich-media-ordering' into 'develop'
...
Rich Media Parser should use first image found
Closes #3356
See merge request pleroma/pleroma!4329
2025-03-01 02:01:22 +00:00
Mark Felder
ac0882e348
Filter the parsed OpenGraph/Twittercard tags and only retain the ones we intend to use.
2025-02-28 17:24:23 -08:00
Mark Felder
2c9d071aad
Retire MRFs DNSRBL, FODirectReply, and QuietReply
...
DNSRBL was a neat experiment which should live out of tree. It works and could be used to coordinate rules across different servers, but Simple Policy will always be better
FODirectReply and QuietReply have reliability issues as implemented in an MRF. If we want to expose this functionality to admins it should be a setting that overrides the chosen scope during CommonAPI.post instead of trying to rewrite the recipients with an MRF.
2025-02-28 16:43:28 -08:00
Mark Felder
cb073a9cd0
Rich Media Parser should use first og:image
2025-02-28 15:12:49 -08:00
Mark Felder
7bdeb9a1e5
Fix OpenGraph/TwitterCard meta tag ordering for posts with multiple attachments
2025-02-28 13:36:00 -08:00
Lain Soykaf
bf134664b4
PackTest: Add test for skipping emoji
2025-02-28 12:53:15 +04:00
Lain Soykaf
2fcb90f369
Emoji, Pack, Backup, Frontend: Use SafeZip
2025-02-27 17:06:15 +04:00
Oneric
0f5ac7e86d
Add SafeZip module
...
This will replace all the slightly different safety workarounds at
different ZIP handling sites and ensure safety is actually consistently
enforced everywhere while also making code cleaner and easiert to
follow.
2025-02-27 14:19:50 +04:00
Lain Soykaf
c31fabdebd
Mogrify/Mogrifun: Asyncify
2025-02-25 17:08:21 +04:00
Lain Soykaf
ee291f08e8
AnonymizeFilename: Asyncify
2025-02-25 16:40:45 +04:00
Lain Soykaf
5851d787b6
Merge branch and resolve conflict in database_test.exs
2025-02-25 16:23:46 +04:00
Lain Soykaf
a92b1fbded
UserRelationshipTest: Don't use Mock.
2025-02-23 17:51:25 +04:00
lain
6f48ade417
Merge branch 'post-languages' into 'develop'
...
Allow to specify post language
See merge request pleroma/pleroma!3940
2025-02-22 12:42:42 +00:00
lain
801a2256f4
Merge branch 'follow-hashtags' into 'develop'
...
Hashtag following (from Akkoma)
See merge request pleroma/pleroma!4307
2025-02-22 12:26:18 +00:00
Mark Felder
f26509bf16
Fix missing check for domain presence in rich media ignore_host configuration
2025-02-21 17:38:55 -08:00
mkljczk
d905fa0ad8
Allow incoming "Listen" activities
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-02-17 21:28:07 +01:00
mkljczk
04af8bfd9c
credo
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-02-17 18:26:24 +01:00
mkljczk
120fbbc97e
Include contentMap in outgoing posts
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-02-17 17:55:03 +01:00
mkljczk
ea01b5934f
Merge remote-tracking branch 'origin/develop' into post-languages
2025-02-17 17:36:02 +01:00
Lain Soykaf
81ab906466
AnalyzeMetadata: Don't crash on grayscale image blurhash
2025-01-30 12:18:20 +04:00
mkljczk
8cd7716872
Fix Mastodon incoming edits with inlined "likes"
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-01-28 22:47:42 +01:00
mkljczk
f2c612d4ae
Merge branch 'actor-published' into 'develop'
...
Include "published" in actor view
See merge request pleroma/pleroma!4312
2025-01-21 13:03:35 +00:00
Haelwenn
4461cc984d
Merge branch 'proxy-redirect' into 'develop'
...
MediaProxyController: Use 301 for permanent redirects
See merge request pleroma/pleroma!4313
2025-01-21 09:31:17 +00:00
Lain Soykaf
2226171890
MediaProxyController: Use 301 for permanent redirects
2025-01-21 12:24:56 +04:00
mkljczk
38b17933e1
Include "published" in actor view
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-01-19 16:26:46 +01:00
mkljczk
855294bb3d
Link to exported outbox/followers/following collections in backup actor.json
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-01-09 12:58:51 +01:00
mkljczk
36b71733a0
fix alias ordering
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2024-12-30 21:01:41 +01:00
mkljczk
f565cf2b5b
update spec
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2024-12-30 18:11:21 +01:00
FloatingGhost
bdb9f888d7
Add /api/v1/followed_tags
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2024-12-30 17:57:57 +01:00
floatingghost
c94c6eac22
Remerge of hashtag following ( #341 )
...
this time with less idiot
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/341
Signed-off-by: mkljczk <git@mkljczk.pl>
2024-12-30 17:56:18 +01:00
tusooa
b51f5a84eb
Verify a local Update sent through AP C2S so users can only update their own objects
2024-12-09 12:43:08 +04:00
kPherox
3f98c8bd1b
fix: skip directory entries
...
In OTP 27.1 or later, `:zip.unzip/2` without `:skip_directories` option returns directory entries.
However in OTP 26, passing `:skip_directories` returns a `:bad_option` error, so this option is not available for compatibility.
2024-11-27 17:55:33 +09:00
lain
d92d6132f2
Merge branch 'meilisearch/misc-fixes' into 'develop'
...
Miscellaneous fixes for Meilisearch
See merge request pleroma/pleroma!4296
2024-11-21 14:29:26 +00:00
Lain Soykaf
551534f3ee
B ReleaseTasks: Fix task module finding.
2024-11-21 16:07:09 +04:00
Mint
da7132caba
Remove unused import
2024-11-21 02:40:27 +03:00
