William Pitcock 0159a6dbe9 router: require oauth_read for searching ... Search calls are generally expensive and allow unauthenticated users to crawl the instance for user profiles or posts which contain specified keywords. An adversary can build a distributed search engine which not only will consume significant instance resources, but also can be used for undesirable purposes such as datamining. Accordingly, require authenticated access to use the search API endpoints. This acts as a nice balance as it allows guest users to make use of most functionality available in Pleroma FE while ensuring that Pleroma instances are reasonably protected from resource exhaustion. It also removes Pleroma as a potential vector in distributed search engines.		2019-05-29 10:58:45 +00:00
..
mix/tasks	Disable timeouts for object pruning query	2019-05-22 20:10:52 +03:00
pleroma	router: require oauth_read for searching	2019-05-29 10:58:45 +00:00
healthcheck.ex	Feature/826 healthcheck endpoint	2019-04-22 07:19:53 +00:00
jason_types.ex
transports.ex
xml_builder.ex	xml builder: properly escape quotes	2019-05-12 19:04:37 +00:00