9 Commits (92de439c04785530ce15f55cae18590136c75216)

Author	SHA1	Message	Date
ThibG	fda437a020	Fix sanitizing lists contents (#11354) ... * Add test * Fix code for sanitizing nested lists stripping all tags	5 years ago
Eugen Rochko	103a9f4466	Fix sanitizer making block level elements unreadable (#10836) ... Fix #10834	5 years ago
Eugen Rochko	8f64b17d98	Whitelist dat/ipfs/gopher links in sanitizer (#8034) ... Fix #7994	6 years ago
puckipedia	545095b3ce	[!] Sanitize incoming classlist properly (#6162) ... * Sanitize classlist properly * Actually properly sanitize every class after the first * Improve Formatter spec to check for multiple classes and non-space whitespace	7 years ago
nightpool	94d0e012de	Whitelist allowed classes for federated statuses (#3810) ... * Whitelist allowed classes for federated statuses Allowed classes are currently: - Any microformats class (h/p/u/dt/e-*) - the classes mention, hashtag, ellipses and invisible. this last one is somewhat suspect, but Mastodon currently uses it to render hidden link text. resolved #3790 * Fix code style	7 years ago
unarist	6bd6dcf6df	Allow "class" attribute on the "a" tag in sanitization (#3623) ... This preserves `<a ... class="u-url mention">` from other Mastodon instances.	7 years ago
Eugen Rochko	58bcd50f7f	Fix #1426 - Trim long usernames in public follower/following lists (#2993) ... Fix #2221 - Catch OpenSSL exceptions when loading remote avatars/headers/attachments Don't strip "rel" attribute from <a> tags when sanitizing (microformats)	8 years ago
Yamagishi Kazutoshi	4a5f73c8ae	Add target=_blank to user note (#2622) ... * Add target=_blank to user note Open new window when click link from user profile in remote instance. * fix rubocop	8 years ago
Eugen Rochko	88725d6ce8	OEmbed support for PreviewCard (#2337) ... * OEmbed support for PreviewCard * Improve ProviderDiscovery code failure treatment * Do not crawl links if there is a content warning, since those don't display a link card anyway * Reset db schema * Fresh migrate * Fix rubocop style issues Fix #1681 - return existing access token when applicable instead of creating new * Fix test * Extract http client to helper * Improve oembed controller	8 years ago