7969 Commits (fixes/small-otp-secret-length-4.2)

Author	SHA1	Message	Date
David Roetzel	393a072c6f	Increase length of OTP secret	10 months ago
Claire	d675803f07	Fix broken notifications for mentions from local moderators in 4.2.11 (#31484)	11 months ago
Jeong Arm	8fe1cefe4c	Handle featured collections without items (#27581)	12 months ago
Claire	86f15cef66	Change search popout to not list unusable search options when logged out (#27918)	12 months ago
June	49820ecefa	Fix not all legal images showing in file picker when uploading custom emoji (#28076)	12 months ago
Jonathan de Jong	9d2e59bb45	Fix error when encountering malformed Tag objects from Kbin (#28235)	12 months ago
Michael Stanclift	6fcb1f5799	Fix OCR when using S3/CDN for assets (#28551)	12 months ago
Claire	297ad9aeb8	Fix already-invalid reports failing to resolve (#29027)	12 months ago
Claire	e1be281e3d	Fix report reason selector in moderation interface not unselecting rules when changing category (#29026)	12 months ago
Râu Cao	d1854798c9	Fix local account search on LDAP login being case-sensitive (#30113) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	12 months ago
Claire	a2c7f7f690	Fix division by zero on some video/GIF files (#30600)	12 months ago
Adam Niedzielski	7b7d404efe	Fix ß bug in regexp for mentions and tags (#31122)	12 months ago
Claire	0fc738a323	Fix hashtag matching pattern matching some link anchors (#30190)	12 months ago
Claire	5cb36daa0f	Fix Web UI trying to save user settings when logged out (#30324)	12 months ago
Claire	a8039dda13	Fix click event handling when clicking outside of an open dropdown menu (#31251)	12 months ago
Claire	0a345ad5e1	Fix logic of block/mute bypass for mentions from moderators (#31271)	12 months ago
Claire	13bab94265	Fix duplicate `orderedItems` in user archive's `outbox.json` (#31099)	12 months ago
Adam Niedzielski	161aa0f8f6	Select correct self link when parsing Webfinger response (#31110)	12 months ago
Claire	fe92b241b2	Fix status processing failing halfway when a remote post has a malformed `replies` attribute (#31246)	12 months ago
Claire	d4bf22b632	Merge pull request from GHSA-xjvf-fm67-4qc3	1 year ago
Claire	4fb4721072	Merge pull request from GHSA-58x8-3qxw-6hm7 ... * Fix insufficient permission checking for public timeline endpoints Note that this changes unauthenticated access failure code from 401 to 422 * Add more tests for public timelines * Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`	1 year ago
Claire	df974a912b	Merge pull request from GHSA-vp5r-5pgw-jwqx ... * Fix streaming sessions not being closed when revoking access to an app * Add tests for GHSA-7w3c-p9j8-mq3x	1 year ago
Claire	6cd9bd6ae1	fix: Return HTTP 422 when scheduled status time is less than 5 minutes (#30584)	1 year ago
David Roetzel	9b6219c48f	Improve encoding detection for link cards (#30780)	1 year ago
Eugen Rochko	88b2d6eca5	Change search modifiers to be case-insensitive (#30865)	1 year ago
David Roetzel	846f59c6e9	Add size limit for link preview URLs (#30854)	1 year ago
Claire	fcae9435ec	Fix `/admin/accounts/:account_id/statuses/:id` for edited posts with media attachments (#30819)	1 year ago
Claire	19ed22dc58	Fix duplicate `@context` attribute in user export (#30653)	1 year ago
Claire	520b2086af	Change PWA start URL from `/home` to `/` (#27377)	1 year ago
Claire	943792c187	Merge pull request from GHSA-5fq7-3p3j-9vrf	1 year ago
Emelia Smith	186f916192	Fix: remove broken OAuth Application vacuuming & throttle OAuth Application registrations (#30316) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	1 year ago
Claire	f9c41ae43b	Normalize language code of incoming posts (#30403)	1 year ago
Emelia Smith	67b2e62331	Fix missing destory audit logs for Domain Allows (#30125)	1 year ago
Claire	56b7d1a7b6	Fix not being able to block a subdomain of an already-blocked domain through the API (#30119)	1 year ago
Claire	51ef619140	Fix Idempotency-Key ignored when scheduling a post (#30084)	1 year ago
Tim Rogers	e69780ec59	Fixed crash when supplying FFMPEG_BINARY environment variable (#30022)	1 year ago
Claire	c3be5a3d2e	Remove caching in `cache_collection` (#29862)	1 year ago
Claire	86807e4799	Improve email address validation (#29838)	1 year ago
Matt Jankowski	0143c9d3e1	Fix results/query in `api/v1/featured_tags/suggestions` (#29597)	1 year ago
Jeong Arm	ab3f9852f2	Normalize idna domain before account unblock domain (#29530)	1 year ago
Emelia Smith	f784213c64	Return domain block digests from admin domain blocks API (#29092)	1 year ago
Claire	6536d96d1b	Add fallback redirection when getting a webfinger query `WEB_DOMAIN@WEB_DOMAIN` (#28592)	1 year ago
Claire	f3ad918950	Fix processing of `Link` objects in `Image` objects (#29363)	1 year ago
Claire	9a7802655f	Fix link verifications when page size exceeds 1MB (#29361)	1 year ago
Claire	328a9b8157	Change registrations to be disabled by default for new servers (#29353)	1 year ago
Claire	4fd22acb4a	Fix auto-close email being sent to users with devops permissions instead of settings permissions (#29356)	1 year ago
Claire	28b666b0d5	Automatically switch from open to approved registrations in absence of moderators (#29337)	1 year ago
Claire	15de520201	Merge pull request from GHSA-jhrq-qvrm-qr36 ... * Fix insufficient Content-Type checking of fetched ActivityStreams objects * Allow JSON-LD documents with multiple profiles	1 year ago
Claire	870ee80fd3	Fix user creation failure handling in OAuth paths (#29207)	1 year ago
Claire	f1700523f1	Merge pull request from GHSA-vm39-j3vx-pch3 ... * Prevent different identities from a same SSO provider from accessing a same account * Lock auth provider changes behind `ALLOW_UNSAFE_AUTH_PROVIDER_REATTACH=true` * Rename methods to avoid confusion between OAuth and OmniAuth	1 year ago