fedi/mastodon
1
0
Fork 1
mirror of https://github.com/mastodon/mastodon.git synced 2024-11-08 08:44:27 +00:00
Code Issues Packages Projects Releases Wiki Activity
13039 commits 120 branches 266 tags 960 MiB
Commit graph

13039 commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Claire bea446d892
Update security policy for 4.1 branch (#32302) 2024-10-08 14:25:05 +02:00
Claire 9da2711173 Bump version to v4.1.20 2024-09-30 13:27:55 +02:00
Claire 59a3e728f7 Fix replies collection being cached improperly 2024-09-30 13:27:55 +02:00
Claire 00f23e8823 Change Mastodon to issue correctly-signed queries by default (#31994) 2024-09-30 13:27:55 +02:00
Claire 43fa9daede Fix security context sometimes not being added in LD-Signed activities (#31871) 2024-09-30 13:27:55 +02:00
Claire d2d0692232 Fix issue when encountering reblog of deleted post in feed rebuild (#32001) 2024-09-30 13:27:55 +02:00
blah 2c1d3f9357 Update dependency fugit 2024-09-30 13:27:55 +02:00
blah f83ddd4eef Update dependency rexml 2024-09-30 13:27:55 +02:00
blah a2905bf0d3 Update dependency puma 2024-09-30 13:27:55 +02:00
blah e142e37b79 Update dependency omniauth-saml 2024-09-30 13:27:55 +02:00
blah f5b611dc26 Update dependency ruby-saml 2024-09-30 13:27:55 +02:00
David Roetzel ad4fd788e4
Merge commit from fork 
This should not change the set of words matched by `USERNAME_RE` but does
change the one matched by `MENTION_RE`. Indeed, the previous regexp allowed
a domain part to start with `.` or `-`, which the new regexp does not allow.

Co-authored-by: Claire <claire.github-309c@sitedethib.com>
 2024-09-30 12:25:54 +02:00
Claire 33e07454f2 Bump version to v4.1.19 2024-08-16 12:37:08 +02:00
Claire 9776a5dbdf Fix linting issues 2024-08-16 12:37:08 +02:00
June 52e78d2192 Fix not all legal images showing in file picker when uploading custom emoji (#28076) 2024-08-16 12:37:08 +02:00
Jonathan de Jong a046dcefe6 Fix error when encountering malformed Tag objects from Kbin (#28235) 2024-08-16 12:37:08 +02:00
Michael Stanclift 3e9238de47 Fix OCR when using S3/CDN for assets (#28551) 2024-08-16 12:37:08 +02:00
Claire 3868a63607 Fix already-invalid reports failing to resolve (#29027) 2024-08-16 12:37:08 +02:00
Claire 6383a2e4ee Fix report reason selector in moderation interface not unselecting rules when changing category (#29026) 2024-08-16 12:37:08 +02:00
Claire 2084f1a081 Fix development environment admin account not being auto-approved (#29958) 2024-08-16 12:37:08 +02:00
Râu Cao 4d994fa24f Fix local account search on LDAP login being case-sensitive (#30113) 
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
 2024-08-16 12:37:08 +02:00
Claire aa3fc5364c Fix division by zero on some video/GIF files (#30600) 2024-08-16 12:37:08 +02:00
Adam Niedzielski f4b4a855ec Fix ß bug in regexp for mentions and tags (#31122) 2024-08-16 12:37:08 +02:00
Claire 694cf6ca5c Fix hashtag matching pattern matching some link anchors (#30190) 2024-08-16 12:37:08 +02:00
Adam Niedzielski 3e1f1b545d Select correct self link when parsing Webfinger response (#31110) 2024-08-16 12:37:08 +02:00
Claire 67b38a5d64 Fix incorrect rate limit on PUT requests (#31356) 2024-08-16 12:37:08 +02:00
Claire d673b6e920 Fix status processing failing halfway when a remote post has a malformed replies attribute (#31246) 2024-08-16 12:37:08 +02:00
Claire ff90ebffaa
Bump version to v4.1.18 (#30911) 2024-07-04 16:46:39 +02:00
Claire a1c7aae28a
Merge pull request from GHSA-xjvf-fm67-4qc3 2024-07-04 16:45:52 +02:00
Claire 34aeef3453
Merge pull request from GHSA-58x8-3qxw-6hm7 
* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
 2024-07-04 16:26:49 +02:00
Claire 122740047a
Merge pull request from GHSA-vp5r-5pgw-jwqx 
* Fix streaming sessions not being closed when revoking access to an app

* Add tests for GHSA-7w3c-p9j8-mq3x
 2024-07-04 16:11:28 +02:00
Claire 4b45333aff fix: Return HTTP 422 when scheduled status time is less than 5 minutes (#30584) 2024-07-03 11:13:40 +02:00
David Roetzel 6cf83a2a64 Improve encoding detection for link cards (#30780) 2024-07-03 11:13:40 +02:00
Eugen Rochko 2a5819e8bb Change search modifiers to be case-insensitive (#30865) 2024-07-03 11:13:40 +02:00
David Roetzel 815680bd13 Add size limit for link preview URLs (#30854) 2024-07-03 11:13:40 +02:00
Claire d8e8437a29 Update dependency rails 2024-07-02 16:20:04 +02:00
Tim Rogers 839147e099 Added check for STATSD_ADDR setting to emit a warning and proceed rather than crashing if the address is unreachable (#30691) 2024-07-02 16:20:04 +02:00
Claire 8e924e4338 Fix /admin/accounts/:account_id/statuses/:id for edited posts with media attachments (#30819) 2024-07-02 16:20:04 +02:00
Claire 2ee88a99d9 Change PWA start URL from /home to / (#27377) 2024-06-18 16:05:53 +02:00
Claire 1cad857f14
Bump version to v4.1.17 (#30472) 2024-05-30 15:49:14 +02:00
Claire 95ebcff98e Fix rate-limiting incorrectly triggering a session cookie on most endpoints (#30483) 2024-05-30 15:20:04 +02:00
Claire d770b61a74
Merge pull request from GHSA-c2r5-cfqr-c553 
* Add hardening monkey-patch to prevent IP spoofing on misconfigured installations

* Remove rack-attack safelist
 2024-05-30 14:24:29 +02:00
Claire 020228ddba
Merge pull request from GHSA-q3rg-xx5v-4mxh 2024-05-30 14:14:04 +02:00
Claire e292a28933
Merge pull request from GHSA-5fq7-3p3j-9vrf 2024-05-30 14:03:13 +02:00
Claire ba240cea0c Normalize language code of incoming posts (#30403) 2024-05-29 15:31:34 +02:00
Claire 257f9abd56 Fix leaking Elasticsearch connections in Sidekiq processes (#30450) 2024-05-29 15:31:34 +02:00
Claire b4e3a789b1 Update dependency rexml to 3.2.8 2024-05-29 15:31:34 +02:00
Claire b39fbe7c83 Update dependency nokogiri to 1.16.5 2024-05-17 12:30:07 +02:00
Claire c717b7da99 Update dependency puma to 5.6.8 2024-05-17 12:30:07 +02:00
Claire 13bbcdf4d4 Update dependency json-jwt to 1.15.3.1 2024-05-17 12:30:07 +02:00