Lain Soykaf
5ce612b272
Linting
2025-03-11 18:21:27 +04:00
Lain Soykaf
2293d0826a
Tests: Fix tests.
2025-03-11 17:53:05 +04:00
Lain Soykaf
51c1d6fb2d
Containment: Never fetch locally
2025-03-11 16:37:17 +04:00
Lain Soykaf
b0c2ec5fb9
Fetcher Tests: Add tests validating the content-type
2025-03-11 16:15:14 +04:00
Lain Soykaf
adb5cb96d3
Object.Fetcher: Don't do cross-site redirects.
2025-03-11 15:50:17 +04:00
Lain Soykaf
577b7cb061
StealEmojiPolicy: Sanitise emoji names.
2025-03-11 14:59:06 +04:00
Lain Soykaf
c143653364
ReverseProxy: Sanitize content.
2025-03-11 14:18:36 +04:00
Lain Soykaf
d9ae9b676c
InstanceStatic: Extra-sanitize emoji
2025-03-11 14:09:31 +04:00
Lain Soykaf
b1309bdb40
More fixes for InstanceStatic
2025-03-10 18:44:17 +04:00
Lain Soykaf
1dd9ba5d6f
Sanitize media uploads.
2025-03-10 17:23:21 +04:00
Lain Soykaf
b469b9d9d3
.
2025-03-10 16:48:54 +04:00
Lain Soykaf
edcd816730
Merge branch 'assorted-test-fixes' into secfix
2025-03-10 16:04:46 +04:00
Lain Soykaf
a184eccde7
Safezip: Fix test (issue was a difference in file ordering between otp26 and otp27)
2025-03-02 23:18:51 +04:00
Lain Soykaf
cd5f018206
SafeZip Test: Skip failing CI tests for the release (tests work fine locally)
2025-03-01 20:08:19 +04:00
Lain Soykaf
32acdf0936
Merge branch 'security-2.9' into release/2.9.0
2025-03-01 17:45:28 +04:00
Oneric
13a88bd1a5
Register APNG MIME type
...
The newest git HEAD of MIME already knows about APNG, but this
hasn’t been released yet. Without this, APNG attachments from
remote posts won’t display as images in frontends.
Fixes: akkoma#657
2025-03-01 17:26:46 +04:00
Lain Soykaf
706bfffcda
Linting
2025-03-01 17:16:48 +04:00
Lain Soykaf
88ee385302
Transmogrifier: Strip internal fields
2025-03-01 17:13:47 +04:00
Lain Soykaf
4604f2944e
Merge branch 'pleroma-ensure-authorized-fetch' into security-2.9
2025-03-01 14:07:02 +04:00
feld
a8e863e0d6
Merge branch 'rich-media-ordering' into 'develop'
...
Rich Media Parser should use first image found
Closes #3356
See merge request pleroma/pleroma!4329
2025-03-01 02:01:22 +00:00
Mark Felder
ac0882e348
Filter the parsed OpenGraph/Twittercard tags and only retain the ones we intend to use.
2025-02-28 17:24:23 -08:00
Mark Felder
2c9d071aad
Retire MRFs DNSRBL, FODirectReply, and QuietReply
...
DNSRBL was a neat experiment which should live out of tree. It works and could be used to coordinate rules across different servers, but Simple Policy will always be better
FODirectReply and QuietReply have reliability issues as implemented in an MRF. If we want to expose this functionality to admins it should be a setting that overrides the chosen scope during CommonAPI.post instead of trying to rewrite the recipients with an MRF.
2025-02-28 16:43:28 -08:00
Mark Felder
2137b681dc
Fix image URLs in TwitterCard parser test
...
The logic has been changed to ensure we always choose the first image if multiple are specified. This also applies when both OpenGraph and TwitterCard tags are published on a page. We parse for OpenGraph tags first and in this case the website was intentionally serving different images for TwitterCards and OpenGraph.
2025-02-28 15:26:13 -08:00
Mark Felder
cb073a9cd0
Rich Media Parser should use first og:image
2025-02-28 15:12:49 -08:00
Mark Felder
7bdeb9a1e5
Fix OpenGraph/TwitterCard meta tag ordering for posts with multiple attachments
2025-02-28 13:36:00 -08:00
Lain Soykaf
bf134664b4
PackTest: Add test for skipping emoji
2025-02-28 12:53:15 +04:00
Lain Soykaf
b89070a6ad
SafeZip: Add tests.
2025-02-27 15:30:20 +04:00
Lain Soykaf
70a784e16a
AutolinkerToLinkifyTest: Asyncify
2025-02-25 17:36:05 +04:00
Lain Soykaf
fd128ec7c2
ConfigControllerTest: Fix it!
2025-02-25 17:18:49 +04:00
Lain Soykaf
c31fabdebd
Mogrify/Mogrifun: Asyncify
2025-02-25 17:08:21 +04:00
Lain Soykaf
ee291f08e8
AnonymizeFilename: Asyncify
2025-02-25 16:40:45 +04:00
Lain Soykaf
5851d787b6
Merge branch and resolve conflict in database_test.exs
2025-02-25 16:23:46 +04:00
Lain Soykaf
bee027e511
DatabaseTest: Include user_follows_hashtag in expected tables
2025-02-25 16:16:15 +04:00
Lain Soykaf
1ebbab1618
AppTest: Make test more resilient.
2025-02-24 17:15:59 +04:00
Lain Soykaf
4b3a985660
PackTest: Make test more resilient
2025-02-24 17:15:48 +04:00
Lain Soykaf
229ce66a8f
DataCase: By default, stub DateTime.
2025-02-23 17:52:33 +04:00
Lain Soykaf
263b02ffcb
Tests: Use StaticConfig when possible.
2025-02-23 17:52:17 +04:00
Lain Soykaf
a92b1fbded
UserRelationshipTest: Don't use Mock.
2025-02-23 17:51:25 +04:00
lain
6f48ade417
Merge branch 'post-languages' into 'develop'
...
Allow to specify post language
See merge request pleroma/pleroma!3940
2025-02-22 12:42:42 +00:00
lain
801a2256f4
Merge branch 'follow-hashtags' into 'develop'
...
Hashtag following (from Akkoma)
See merge request pleroma/pleroma!4307
2025-02-22 12:26:18 +00:00
Mark Felder
f26509bf16
Fix missing check for domain presence in rich media ignore_host configuration
2025-02-21 17:38:55 -08:00
mkljczk
ce4c07cc2b
update test
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-02-17 19:21:08 +01:00
mkljczk
120fbbc97e
Include contentMap in outgoing posts
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-02-17 17:55:03 +01:00
mkljczk
ea01b5934f
Merge remote-tracking branch 'origin/develop' into post-languages
2025-02-17 17:36:02 +01:00
Lain Soykaf
81ab906466
AnalyzeMetadata: Don't crash on grayscale image blurhash
2025-01-30 12:18:20 +04:00
mkljczk
8cd7716872
Fix Mastodon incoming edits with inlined "likes"
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-01-28 22:47:42 +01:00
Haelwenn
4461cc984d
Merge branch 'proxy-redirect' into 'develop'
...
MediaProxyController: Use 301 for permanent redirects
See merge request pleroma/pleroma!4313
2025-01-21 09:31:17 +00:00
Lain Soykaf
2226171890
MediaProxyController: Use 301 for permanent redirects
2025-01-21 12:24:56 +04:00
mkljczk
855294bb3d
Link to exported outbox/followers/following collections in backup actor.json
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2025-01-09 12:58:51 +01:00
mkljczk
aa74c87443
fix tests
...
Signed-off-by: mkljczk <git@mkljczk.pl>
2024-12-30 22:41:53 +01:00
