Commit Graph

13028 Commits (fixes/small-otp-secret-length-4.1)
 

Author SHA1 Message Date
David Roetzel c000dff08a
Increase length of OTP secret 10 months ago
Claire 33e07454f2 Bump version to v4.1.19 12 months ago
Claire 9776a5dbdf Fix linting issues 12 months ago
June 52e78d2192 Fix not all legal images showing in file picker when uploading custom emoji (#28076) 12 months ago
Jonathan de Jong a046dcefe6 Fix error when encountering malformed Tag objects from Kbin (#28235) 12 months ago
Michael Stanclift 3e9238de47 Fix OCR when using S3/CDN for assets (#28551) 12 months ago
Claire 3868a63607 Fix already-invalid reports failing to resolve (#29027) 12 months ago
Claire 6383a2e4ee Fix report reason selector in moderation interface not unselecting rules when changing category (#29026) 12 months ago
Claire 2084f1a081 Fix development environment admin account not being auto-approved (#29958) 12 months ago
Râu Cao 4d994fa24f Fix local account search on LDAP login being case-sensitive (#30113)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
12 months ago
Claire aa3fc5364c Fix division by zero on some video/GIF files (#30600) 12 months ago
Adam Niedzielski f4b4a855ec Fix ß bug in regexp for mentions and tags (#31122) 12 months ago
Claire 694cf6ca5c Fix hashtag matching pattern matching some link anchors (#30190) 12 months ago
Adam Niedzielski 3e1f1b545d Select correct self link when parsing Webfinger response (#31110) 12 months ago
Claire 67b38a5d64 Fix incorrect rate limit on PUT requests (#31356) 12 months ago
Claire d673b6e920 Fix status processing failing halfway when a remote post has a malformed `replies` attribute (#31246) 12 months ago
Claire ff90ebffaa
Bump version to v4.1.18 (#30911) 1 year ago
Claire a1c7aae28a
Merge pull request from GHSA-xjvf-fm67-4qc3 1 year ago
Claire 34aeef3453
Merge pull request from GHSA-58x8-3qxw-6hm7
* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
1 year ago
Claire 122740047a
Merge pull request from GHSA-vp5r-5pgw-jwqx
* Fix streaming sessions not being closed when revoking access to an app

* Add tests for GHSA-7w3c-p9j8-mq3x
1 year ago
Claire 4b45333aff fix: Return HTTP 422 when scheduled status time is less than 5 minutes (#30584) 1 year ago
David Roetzel 6cf83a2a64 Improve encoding detection for link cards (#30780) 1 year ago
Eugen Rochko 2a5819e8bb Change search modifiers to be case-insensitive (#30865) 1 year ago
David Roetzel 815680bd13 Add size limit for link preview URLs (#30854) 1 year ago
Claire d8e8437a29 Update dependency rails 1 year ago
Tim Rogers 839147e099 Added check for STATSD_ADDR setting to emit a warning and proceed rather than crashing if the address is unreachable (#30691) 1 year ago
Claire 8e924e4338 Fix `/admin/accounts/:account_id/statuses/:id` for edited posts with media attachments (#30819) 1 year ago
Claire 2ee88a99d9 Change PWA start URL from `/home` to `/` (#27377) 1 year ago
Claire 1cad857f14
Bump version to v4.1.17 (#30472) 1 year ago
Claire 95ebcff98e Fix rate-limiting incorrectly triggering a session cookie on most endpoints (#30483) 1 year ago
Claire d770b61a74
Merge pull request from GHSA-c2r5-cfqr-c553
* Add hardening monkey-patch to prevent IP spoofing on misconfigured installations

* Remove rack-attack safelist
1 year ago
Claire 020228ddba
Merge pull request from GHSA-q3rg-xx5v-4mxh 1 year ago
Claire e292a28933
Merge pull request from GHSA-5fq7-3p3j-9vrf 1 year ago
Claire ba240cea0c Normalize language code of incoming posts (#30403) 1 year ago
Claire 257f9abd56 Fix leaking Elasticsearch connections in Sidekiq processes (#30450) 1 year ago
Claire b4e3a789b1 Update dependency rexml to 3.2.8 1 year ago
Claire b39fbe7c83 Update dependency nokogiri to 1.16.5 1 year ago
Claire c717b7da99 Update dependency puma to 5.6.8 1 year ago
Claire 13bbcdf4d4 Update dependency json-jwt to 1.15.3.1 1 year ago
Claire 3aec33f5a2 Fix off-by-one in `tootctl media` commands (#30306) 1 year ago
Emelia Smith 984d7d3dc8 Fix missing destory audit logs for Domain Allows (#30125) 1 year ago
Claire 33a50884e5 Fix not being able to block a subdomain of an already-blocked domain through the API (#30119) 1 year ago
Claire 70c4d70dbe Fix Idempotency-Key ignored when scheduling a post (#30084) 1 year ago
Tim Rogers a6089cdfca Fixed crash when supplying FFMPEG_BINARY environment variable (#30022) 1 year ago
Claire 5973d7a4b6 Remove caching in `cache_collection` (#29862) 1 year ago
Claire ba5551fd1d Improve email address validation (#29838) 1 year ago
Matt Jankowski 8ce403a85b Fix results/query in `api/v1/featured_tags/suggestions` (#29597) 1 year ago
Jeong Arm 3ff575f54c Normalize idna domain before account unblock domain (#29530) 1 year ago
Claire affbb10566 Fix admin account created by `mastodon:setup` not being auto-approved (#29379) 1 year ago
Emelia Smith 209632a0fd Return domain block digests from admin domain blocks API (#29092) 1 year ago