mastodon

Commit Graph

Author	SHA1	Message	Date
Eugen Rochko	2adcad04ff	Fix error in suggestions API due to typo (#17486 ) Regression from #17479	3 years ago
Eugen Rochko	b6d7726ecb	Remove language detection through cld3 (#17478 ) * Remove language detection through cld3 * Update app/helpers/languages_helper.rb Co-authored-by: Yamagishi Kazutoshi <ykzts@desire.sh> Co-authored-by: Yamagishi Kazutoshi <ykzts@desire.sh>	3 years ago
Eugen Rochko	85b86fe28c	Add global `locale` param (#17464 ) - Remove the session-based locale stickyness	3 years ago
Eugen Rochko	35850f8195	Fix localization of cold-start follow recommendations (#17479 )	3 years ago
Claire	52c1b86964	Fix Ruby 2.5 incompatibility (#17465 )	3 years ago
Eugen Rochko	f1f6ddd536	Fix structured data parsing from links choking on bad data (#17403 ) * Fix structured data parsing from links choking on bad data - Fix og:url meta tag being prioritized over canonical link tag - Fix structured data parsing choking on commented-out CDATA declarations - Fix HTML entities in title, description, provider_name, author_name - Change structured data parsing to attempt every JSON-LD script tag * Remove unnecessary slash escapes from CDATA regex pattern	3 years ago
Claire	73a782391c	Fix replies collection incorrectly looping (#17462 ) * Refactor tests * Add tests * Fix replies collection incorrectly looping	3 years ago
Claire	0d2cf3cd4a	Fix errors when multiple Delete are received for a given actor (#17460 )	3 years ago
Claire	92658f0fb0	Fix instance actor not being dereferenceable (#17457 ) * Add tests * Fix instance actor not being dereferenceable * Fix tests * Fix tests for real	3 years ago
Eugen Rochko	e03e7ac290	Fix error on account relationships page in admin UI (#17444 )	3 years ago
Claire	c8b1e72a4f	Fix compacted JSON-LD possibly causing compatibility issues on forwarding (#17428 )	3 years ago
Claire	948235592a	Fix response_to_recipient? CTE (#17427 )	3 years ago
Claire	d1ecc323e7	Compact JSON-LD signed incoming activities (#17426 ) Co-authored-by: Puck Meerburg <puck@puck.moe>	3 years ago
Claire	987d88ea56	Fix requiring an extra restart after recent post-deployment migrations (#17422 ) Follow-up to #16409	3 years ago
Claire	f5639e1cbe	Change public profile pages to be disabled for unconfirmed users (#17385 ) Fixes #17382 Note that unconfirmed and unapproved accounts can still be searched for and their (empty) account retrieved using the REST API.	3 years ago
Claire	03d59340da	Fix Sidekiq warnings about JSON serialization (#17381 ) * Fix Sidekiq warnings about JSON serialization This occurs on every symbol argument we pass, and every symbol key in hashes, because Sidekiq expects strings instead. See https://github.com/mperham/sidekiq/pull/5071 We do not need to change how workers parse their arguments because this has not changed and we were already converting to symbols adequately or using `with_indifferent_access`. * Set Sidekiq to raise on unsafe arguments in test mode In order to more easily catch issues that would produce warnings in production code.	3 years ago
Claire	166cc5b89d	Fix local distribution of edited statuses (#17380 ) Because `FanOutOnWriteService#update?` was broken, edits were considered as new toots and a regular `update` payload was sent.	3 years ago
Eugen Rochko	6505b39e5d	Fix poll updates being saved as status edits (#17373 ) Fix #17344	3 years ago
Claire	dd63923c0a	Fix link_to_login argument handling when a block is passed (#17345 )	3 years ago
Claire	0a120d86d2	Fix error-prone SQL queries (#15828 ) * Fix error-prone SQL queries in Account search While this code seems to not present an actual vulnerability, one could easily be introduced by mistake due to how the query is built. This PR parameterises the `to_tsquery` input to make the query more robust. * Harden code for Status#tagged_with_all and Status#tagged_with_none Those two scopes aren't used in a way that could be vulnerable to an SQL injection, but keeping them unchanged might be a hazard. * Remove unneeded spaces surrounding tsquery term * Please CodeClimate * Move advanced_search_for SQL template to its own function This avoids one level of indentation while making clearer that the SQL template isn't build from all the dynamic parameters of advanced_search_for. * Add tests covering tagged_with, tagged_with_all and tagged_with_none * Rewrite tagged_with_none to avoid multiple joins and make it more robust * Remove obsolete brakeman warnings * Revert "Remove unneeded spaces surrounding tsquery term" The two queries are not strictly equivalent. This reverts commit `86f16c537e`.	3 years ago
Claire	a63495230a	Change `percent` to `rate` in retention metrics API (#16910 )	3 years ago
Claire	bddd9ba36d	Add OMNIAUTH_ONLY environment variable to enforce externa log-in (#17288 ) * Remove support for OAUTH_REDIRECT_AT_SIGN_IN Fixes #15959 Introduced in #6540, OAUTH_REDIRECT_AT_SIGN_IN allowed skipping the log-in form to instead redirect to the external OmniAuth login provider. However, it did not prevent the log-in form on /about introduced by #10232 from appearing, and completely broke with the introduction of #15228. As I restoring that previous log-in flow without introducing a security vulnerability may require extensive care and knowledge of how OmniAuth works, this commit removes support for OAUTH_REDIRECT_AT_SIGN_IN instead for the time being. * Add OMNIAUTH_ONLY environment variable to enforce external log-in only * Disable user registration when OMNIAUTH_ONLY is set to true * Replace log-in links When OMNIAUTH_ONLY is set with exactly one OmniAuth provider	3 years ago
Claire	cfa583fa71	Remove support for OAUTH_REDIRECT_AT_SIGN_IN (#17287 ) Fixes #15959 Introduced in #6540, OAUTH_REDIRECT_AT_SIGN_IN allowed skipping the log-in form to instead redirect to the external OmniAuth login provider. However, it did not prevent the log-in form on /about introduced by #10232 from appearing, and completely broke with the introduction of #15228. As I restoring that previous log-in flow without introducing a security vulnerability may require extensive care and knowledge of how OmniAuth works, this commit removes support for OAUTH_REDIRECT_AT_SIGN_IN instead for the time being.	3 years ago
Claire	8a07ecd377	Remove leftover database columns from Devise::Models::Rememberable (#17191 ) * Remove leftover database columns from Devise::Models::Rememberable * Update fix-duplication maintenance script * Improve errors/warnings in the fix-duplicates maintenance script	3 years ago
Claire	3a103cd317	Fix text being incorrectly pre-selected in composer textarea on /share (#17339 ) Fixes #17295	3 years ago
Claire	6eea3f8f9c	Add post edited notice in admin and public UIs (#17335 ) * Add edited toot flag on public pages * Add toot edit flag to admin pages	3 years ago
Eugen Rochko	9eb775a9d1	Fix error when using raw distribution worker (#17334 ) Regression from #16697	3 years ago
Eugen Rochko	d412a8d1f2	Fix error when processing poll updates (#17333 ) Regression from #16697	3 years ago
Eugen Rochko	1060666c58	Add support for editing for published statuses (#16697 ) * Add support for editing for published statuses * Fix references to stripped-out code * Various fixes and improvements * Further fixes and improvements * Fix updates being potentially sent to unauthorized recipients * Various fixes and improvements * Fix wrong words in test * Fix notifying accounts that were tagged but were not in the audience * Fix mistake	3 years ago
Jeong Arm	2d1f082bb6	Fix NameError on ActivityPub::FetchFeaturedCollectionService (#17326 ) Related: #16954	3 years ago
Claire	c60f8ce032	Fix `pinned` attribute not being set for private self-posts (#17304 )	3 years ago
Eugen Rochko	14f436c457	Add notifications for statuses deleted by moderators (#17204 )	3 years ago
Claire	d5c9feb7b7	Add support for private pinned posts (#16954 ) * Add support for private pinned toots * Allow local user to pin private toots * Change wording to avoid "direct message"	3 years ago
Claire	081e4426f8	Fix admin interface crash when displaying deleted user (#17301 )	3 years ago
Eugen Rochko	8e84ebf0cb	Remove IP tracking columns from users table (#16409 )	3 years ago
Jeong Arm	bc7a8ae6d6	Gradually increase retry waiting for media processing (#17271 )	3 years ago
Jeong Arm	d3db2eb7fb	Remove custom emojis on domain purge (#17210 )	3 years ago
Claire	37e80994f8	Fix media descriptions not being used for client-side filtering (#17206 ) Fix oversight in #13837	3 years ago
Eugen Rochko	fe71548844	Fix warnings on Rails boot (#16946 )	3 years ago
Rens Groothuijsen	e65080181a	Fix tag rendering error in hashtag column settings (#17184 ) * Flatten tags in configuration to regular array before converting to JSON * Render filter tags using toJS instead of toJSON	3 years ago
Jeong Arm	720e8ab0f5	Fix duplicate record on admin/accounts when searching with IP (#17150 )	3 years ago
Claire	76761d5fc0	Add ability for admins to delete canonical email blocks (#16644 ) * Add admin option to remove canonical email blocks from a deleted account * Add tootctl canonical_email_blocks to inspect and remove canonical email blocks	3 years ago
Claire	7f803c41e2	Add ability to purge undeliverable domains from admin interface (#16686 ) * Add ability to purge undeliverable domains from admin interface * Add tests	3 years ago
Claire	0c17fd9109	Change title of retention chart (#16909 ) Changes from “Retention” to “User retention rate by month after sign-up”. This should make it much clearer to people not familiar with retention charts what it actually means.	3 years ago
Claire	40f202c1e5	Change list title input styling (#17092 )	3 years ago
David Sterry	2aafa5b4e7	ignore hashtag suggestions if they vary only in case (#16460 ) * ignore hashtag suggestions if they vary only in case * remove console.logs and unused args * consistently add space when dismissing suggestions * linting	3 years ago
Takeshi Umeda	bda8e4f815	Fix follow recommendation biased towards older accounts (#17126 )	3 years ago
Eugen Rochko	fe45184b36	Change trending hashtags threshold back from 15 to 5 (#17122 )	3 years ago
heguro	41503507ec	Fix redirection when succeeded WebAuthn (#17098 )	3 years ago
Rens Groothuijsen	66baa629ea	Show correct error message if chosen password is too long (#17082 ) * Add correct error message for exceeding max length on password confirmation field * Code style fixes	3 years ago

1 2 3 4 5 ...

6250 Commits (2adcad04ff96fc8e7cb9aeefef1b22ea38e65457)