mastodon

Commit Graph

Author	SHA1	Message	Date
Eugen Rochko	7fc7437d05	Add CSV export for lists and domain blocks (#9677 ) Fix #6893 Fix #9268	6 years ago
Eugen Rochko	6e49907ecf	Improve admin UI for account view (#9643 )	6 years ago
chr v1.x	c3465f699e	Add local followers page to admin account UI (#9610 ) * Add local followers page to admin account UI For moderation, I often find myself wondering who, locally, is following a remote user. Currently, to see this, I have to go back to the web UI, paste in their full handle, click their profile, and go to the "Followers" tab (plus, this information is incidental, and if mastodon ever decides to resolve all of the follower information, there will be no place local followers are shown). This PR adds a new page which is accessible via the "following" count on the admin's account view page, which shows the local followers. (It has filter parameters for account location to indicate that only local followers are shown, and leave room for expansion if mastodon ever decides to store the entire remote follow list). * Normalize en.yml	6 years ago
Eugen Rochko	ee1ba59692	Add exclude_reblogs option to account statuses API (#9640 ) Fix #9606	6 years ago
Eugen Rochko	9b8c7a9aad	Redirect to reports overview instead of report after account action (#9639 )	6 years ago
ThibG	4423999609	Fix account unsilencing and unsuspension (#9637 ) Fix regression from `3c033c4352`	6 years ago
Eugen Rochko	17cd91c777	Fix signature verification stoplight triggering on non-timeout errors (#9617 )	6 years ago
Takeshi Umeda	bf70e5cfda	Add error message with invalid email confirmation (#9625 )	6 years ago
Eugen Rochko	5d2fc6de32	Add REST API for creating an account (#9572 ) * Add REST API for creating an account The method is available to apps with a token obtained via the client credentials grant. It creates a user and account records, as well as an access token for the app that initiated the request. The user is unconfirmed, and an e-mail is sent as usual. The method returns the access token, which the app should save for later. The REST API is not available to users with unconfirmed accounts, so the app must be smart to wait for the user to click a link in their e-mail inbox. The method is rate-limited by IP to 5 requests per 30 minutes. * Redirect users back to app from confirmation if they were created with an app * Add tests * Return 403 on the method if registrations are not open * Require agreement param to be true in the API when creating an account	6 years ago
ThibG	e25947db4a	Sanitize and sandbox toot embeds (#9552 )	6 years ago
Eugen Rochko	59e333385b	Show 40 profiles per directory page instead of 30 (#9609 ) To better align with the list of hashtags	6 years ago
Eugen Rochko	3c033c4352	Add moderation warnings (#9519 ) * Add moderation warnings Replace individual routes for disabling, silencing, and suspending a user, as well as the report update route, with a unified account action controller that allows you to select an action (none, disable, silence, suspend) as well as whether it should generate an e-mail notification with optional custom text. That notification, with the optional custom text, is saved as a warning. Additionally, there are warning presets you can configure to save time when performing the above. * Use Account#local_username_and_domain	6 years ago
Eugen Rochko	108b2139cd	Allow unauthenticated REST API access to GET /api/v1/accounts/:id/statuses (#9573 ) Fix #7087 The same data is available over the ActivityPub outbox, RSS, and Atom, so there is little benefit to keeping it limited in this method.	6 years ago
jomo	2c1a6f746f	fix CSP / X-Frame-Options for media embeds (#9558 )	6 years ago
ysksn	3281df0df1	Move #set_user to Admin::BaseController (#9470 ) * Move #set_user to Admin::BaseController * Rename Admin::TwoFactorAuthenticationsController from `#set_user` to `#set_target_user` .	6 years ago
Eugen Rochko	087e118971	Remove "most popular" tab from profile directory, add responsive design (#9539 ) * Remove "most popular" tab from profile directory, add responsive design * Remove unused translations	6 years ago
ysksn	b048926e67	Create Settings::BaseController (#9507 ) Define `Settings::BaseController#set_body_classes` so that sub classes inherit `Settings::BaseController` don't need to define `#set_body_classes` agein.	6 years ago
ThibG	cf6ee4ff24	Add admin ability to remove an user's header image (#9495 ) * Fix markup in admin/accounts/:id table for avatar * Add admin ability to remove an user's header image	6 years ago
ThibG	720daa8143	Add instance-wide setting to disable profile directory (#9497 ) * Add instance-wide setting to disable profile directory Fixes #9496 When the profile directory is disabled: - The “discoverable” setting is hidden from users - The “profile directory” link is not shown on public pages - /explore returns 404 * Move Setting.profile_directory check to a before_action filter	6 years ago
ysksn	ed24bb2c3e	Add specs for activitypub collections controller (#9484 ) * Add specs for ActivityPub::CollectionsController#show * Raise ActiveRecord::RecordNotFound Raising ActiveRecord::NotFound raises NameError: uninitialized constant ActiveRecord::NotFound.	6 years ago
ysksn	189a6b17fb	Remove RemoteAccountControllerConcern never used (#9482 )	6 years ago
ysksn	361818e931	Fix Admin::TagsController#unhide (#9481 )	6 years ago
ThibG	81bda7d67c	Add setting to not aggregate reblogs (#9248 ) * Add setting to not aggregate reblogs Fixes #9222 * Handle cases where user is nil in add_to_home and add_to_list * Add hint for setting_aggregate_reblogs option * Reword setting_aggregate_reblogs label	6 years ago
Eugen Rochko	73be8f38c1	Add profile directory (#9427 ) Fix #5578	6 years ago
ThibG	e88c6a5c3c	Fix thread depth computation in statuses_controller (#9426 ) * Add test that should currently fail * Fix depth computation (will still fail if statuses have been filtered out) * Fix handling of broken threads	6 years ago
Eugen Rochko	73faadad28	Redesign admin accounts index (#9340 ) * Improve overview of accounts in admin UI - Display suspended status, role, last activity and IP prominently - Default to showing local accounts - Default to not showing suspended accounts * Remove unused strings * Fix tests * Allow filtering accounts by IP mask	6 years ago
Eugen Rochko	d6b9a62e0a	Extract counters from accounts table to account_stats table (#9295 )	6 years ago
Eugen Rochko	8069fd636b	Remove intermediary arrays when creating hash maps from results (#9291 )	6 years ago
Eugen Rochko	4615512285	Reduce connect timeout limit and limit signature failures by source IP (#9236 ) * Reduce connect timeout from 10s to 1s * Limit failing signature verifications per source IP	6 years ago
Eugen Rochko	6d59dfa15d	Optimize the process of following someone (#9220 ) * Eliminate extra accounts select query from FollowService * Optimistically update follow state in web UI and hide loading bar Fix #6205 * Asynchronize NotifyService in FollowService And fix failing test * Skip Webfinger resolve routine when called from FollowService if possible If an account is ActivityPub, then webfinger re-resolving is not necessary when called from FollowService. Improve options of ResolveAccountService	6 years ago
James Kiesel	4c03e05a4e	Allow joining several hashtags in a single column (#8904 ) * Nascent tag menu on frontend * Hook up frontend to search * Tag intersection backend first pass * Update yarnlock * WIP * Fix for tags not searching correctly * Make radio buttons function * Simplify radio buttons with modeOption * Better naming * Rearrange options * Add all/any/none functionality on backend * Small PR cleanup * Move to service from scope * Small cleanup, add proper service tests * Don't use send with user input :D * Set appropriate column header * Handle auto updating timeline * Fix up toggle function * Use tag value correctly * A bit more correct to use 'self' rather than 'all' in status scope * Fix some style issues * Fix more code style issues * Style select dropdown more better * Only use to_id'ed value to ensure no SQL injection * Revamp frontend to allow for multiple selects * Update backend / col header to account for more flexible tagging * Update brakeman ignore * Codeclimate suggestions * Fix presenter tag_url * Implement initial PR feedback * Handle additional tag streaming * CodeClimate tweak	6 years ago
Eugen Rochko	5c8e7f0e1d	Revert "feat(auth/session_controller): Send Clear-Site-Data when logging out (8627)" (#9161 ) This reverts commit `10680f93e7`.	6 years ago
Eugen Rochko	795f0107d2	Include preview cards in status entity in REST API (#9120 ) * Include preview cards in status entity in REST API * Display preview card in-stream * Improve in-stream display of preview cards	6 years ago
ThibG	215e649391	Fix styling in /auth/edit (#9117 )	6 years ago
Eugen Rochko	d4cf963749	Allow inbox owner to view implicitly targeted ActivityPub payload (#9093 ) Fix #9091	6 years ago
Yamagishi Kazutoshi	e8ffecbd36	Set @body_classes to admin layout (#9081 )	6 years ago
Eugen Rochko	fd5285658f	Add option to block reports from domain (#8830 )	6 years ago
Eugen Rochko	9486f0ca77	Add "disable" button to report screen (#9024 ) * Add "disable" button to report screen * i18n-tasks remove-unused	6 years ago
Eugen Rochko	a38a452481	Add unread indicator to conversations (#9009 )	6 years ago
Eugen Rochko	21ad21cb50	Improve signature verification safeguards (#8959 ) * Downcase signed_headers string before building the signed string The HTTP Signatures draft does not mandate the “headers” field to be downcased, but mandates the header field names to be downcased in the signed string, which means that prior to this patch, Mastodon could fail to process signatures from some compliant clients. It also means that it would not actually check the Digest of non-compliant clients that wouldn't use a lowercased Digest field name. Thankfully, I don't know of any such client. * Revert "Remove dead code (#8919)" This reverts commit `a00ce8c92c`. * Restore time window checking, change it to 12 hours By checking the Date header, we can prevent replaying old vulnerable signatures. The focus is to prevent replaying old vulnerable requests from software that has been fixed in the meantime, so a somewhat long window should be fine and accounts for timezone misconfiguration. * Escape users' URLs when formatting them Fixes possible HTML injection * Escape all string interpolations in Formatter class Slightly improve performance by reducing class allocations from repeated Formatter#encode calls * Fix code style issues	6 years ago
ThibG	2d27c11061	Set Content-Security-Policy rules through RoR's config (#8957 ) * Set CSP rules in RoR's configuration * Override CSP setting in the embed controller to allow frames	6 years ago
Eugen Rochko	a00ce8c92c	Remove dead code (#8919 ) SignatureVerification#matches_time_window? is not called anywhere.	6 years ago
ashleyhull-versent	2dba313100	Replace SVG asset with Custom mascot (#8766 )	6 years ago
Eugen Rochko	774ac47373	Add conversations API (#8832 ) * Add conversations API * Add web UI for conversations * Add test for conversations API * Add tests for ConversationAccount * Improve web UI * Rename ConversationAccount to AccountConversation * Remove conversations on block and mute * Change last_status_id to be a denormalization of status_ids * Add optimistic locking	6 years ago
ThibG	25744d43b0	Ensure only toots from the reported users are reported (#8916 )	6 years ago
Eugen Rochko	e645ae9561	Change admin accounts default sort to most recent (#8813 )	6 years ago
Eugen Rochko	f0fff3eb10	Support min_id-based pagination in REST API (#8736 ) * Allow min_id pagination in Feed#get * Add min_id pagination to home and list timeline APIs * Add min_id pagination to account statuses, public and tag APIs * Remove unused stub in reports API * Use min_id pagination in notifications, favourites, and fix order * Fix HomeFeed#from_database not using paginate_by_id	6 years ago
ふぁぼ原	f7a6f9489d	Add a new preference to always hide all media (#8569 )	6 years ago
Yamagishi Kazutoshi	86f138ed16	Cache instance info (#8765 )	6 years ago
Matt Sweetman	1889526e23	Add user preference to always expand toots marked with content warnings (#8762 )	6 years ago

1 2 3 4 5 ...

778 Commits (66436d08959998be20c6c6bf631177d8c1f3e0d1)