mirrors/pleroma
1
0
Fork 0
mirror of https://git.pleroma.social/pleroma/pleroma.git synced 2024-12-23 08:36:29 +00:00
Code Issues Projects Releases Wiki Activity
pleroma/lib
History
Haelwenn (lanodan) Monnier 1257331291
MastodonAPI.StatusView: Do not use site_name 
site_name allow to spoof the origin of the domain and so hacks like:

<!-- served on https://hacktivis.me/tmp/joinmastodon.org.html -->
<meta property="og:image" content="https://hacktivis.me/datalove/img/meme/pleroma/mastodon%2C%20forbidden%20amuse%20yourself.jpeg" />
<meta property="og:title" content="Mastodon: Forbidden Amuse Yourself" />
<meta property="og:site_name" content="joinmastodon.org" />
<meta http-equiv="refresh" content="0; url=http://joinmastodon.org/">
2020-02-15 00:36:09 +01:00
..
mix Fix email mix task on OTP releases 2020-02-09 03:27:29 +03:00
pleroma MastodonAPI.StatusView: Do not use site_name 2020-02-15 00:36:09 +01:00
jason_types.ex Add license/copyright to all project files 2019-07-10 05:13:23 +00:00
transports.ex Add license/copyright to all project files 2019-07-10 05:13:23 +00:00
xml_builder.ex Add license/copyright to all project files 2019-07-10 05:13:23 +00:00