mastodon

Commit Graph

Author	SHA1	Message	Date
Eugen Rochko	103a9f4466	Fix sanitizer making block level elements unreadable (#10836 ) Fix #10834	6 years ago
Eugen Rochko	560ec24e58	Change /settings/preferences to redirect to appearance, add /settings/preferences/other (#10988 )	6 years ago
Eugen Rochko	1db4117030	Change preferences page into appearance, notifications, and other (#10977 )	6 years ago
ThibG	6c464cd424	Do not misattribute inlined boosts if `attributedTo` isn't present (#10967 ) * Do not misattribute inlined boosts if `attributedTo` isn't present Fixes #10950 * Fix tests	6 years ago
Eugen Rochko	48fee1a800	Fix poll API not requiring authentication on non-public polls (#10960 ) * Fix poll API not requiring authentication on non-public polls That API does not reveal the content of the status, i.e. the question itself, nor who the author is, nor which status it belongs to, but it does reveal the poll options and how many answers they got Fix #10959 * Add test	6 years ago
ThibG	a353dc6030	Fix NotifyService test with regards to reblogs (#10928 ) Fixes #10890	6 years ago
trwnh	e3b39ea4a4	Update remote bio test from 160 to 500 (#10799 )	6 years ago
Paul Woolcock	0c933c1b8c	Add `account_id` param to `GET /api/v1/notifications` (#10796 ) * Add `from_account` to notifications API this adds the ability to filter notifications by the account they originated from * passing a non-existent user should cause none to be returned * Fix codeclimate warnings * fix more codeclimate warnings * make requested changes: * use account id instead of user@domain * name the param `account_id` instead of `from_account` * Don't use `return` in a lambda	6 years ago
trwnh	a6caf919e2	Change bio limit from 160 to 500 (#10790 ) * Change note_length validator from 160 to 500 * Change input maxlength from 160 to 500 * update bio test from 160 to 500 * Multiply a string 30 times instead of 10	6 years ago
ThibG	ae18386558	Fix “invited by” not showing up for invited accounts in admin interface (#10791 )	6 years ago
ThibG	a1519a8ef5	Prevent from publicly boosting one's own private toots (#10775 )	6 years ago
ThibG	14f6ce2885	Record account suspend/silence time and keep track of domain blocks (#10660 ) * Record account suspend/silence time and keep track of domain blocks * Also unblock users who were suspended/silenced before dates were recorded * Add tests * Keep track of suspending date for users suspended through the CLI * Show accurate number of accounts that would be affected by unsuspending an instance * Change migration to set silenced_at and suspended_at * Revert "Also unblock users who were suspended/silenced before dates were recorded" This reverts commit `a015c65d2d`. * Switch from using suspended and silenced to suspended_at and silenced_at * Add post-deployment migration script to remove `suspended` and `silenced` columns * Use Account#silence! and Account#suspend! instead of updating the underlying property * Add silenced_at and suspended_at migration to post-migration * Change account fabricator to translate suspended and silenced attributes * Minor fixes * Make unblocking domains always retroactive	6 years ago
ThibG	62f5235b6f	Prevent silenced local users from notifying remote users not following them (#10575 ) * Prevent silenced local users from notifying remote users not following them This is an attempt to extend the local restrictions of silenced users to the federation. * Add tests * Add tests for making sure private status don't get sent over OStatus	6 years ago
Eugen Rochko	7cb369d4c6	Change e-mail whitelist/blacklist to not be checked when invited (#10683 ) * Change e-mail whitelist/blacklist to not be checked when invited And only when creating an account, not when updating it later Fix #10648 * Fix test	6 years ago
ThibG	011b032300	Provide a link to existing domain block when trying to block an already-blocked domain (#10663 ) * When trying to block an already-blocked domain, provide a link to the block * Fix styling for links in flash messages * Allow blocks to be upgraded but not downgraded	6 years ago
ThibG	21a73c52a7	Check that an invite link is valid before bypassing approval mode (#10657 ) * Check that an invite link is valid before bypassing approval mode Fixes #10656 * Add tests * Only consider valid invite links in registration controller * fixup	6 years ago
Eugen Rochko	a9f130b8d8	Fix Keybase verification using wrong domain for remote accounts (#10547 )	6 years ago
Alex Gessner	154106c0c3	compare usernames case-insensitively on new proof creation flow (#10544 ) * compare usernames case-insensitively on new proof creation flow * Fix code style issue	6 years ago
Eugen Rochko	46cb36fd2c	Add invite request to pending account notification e-mail (#10528 ) Fix sorting of the pending accounts page	6 years ago
Hinaloe	48f466daf1	Allow set the voting period to just 5 minutes (#10525 ) * Add spec of PollValidator for #10190 * Raise fraction less than 1 second * format * simplify time initialize	6 years ago
Eugen Rochko	8b69a66380	Add "why do you want to join" field to invite requests (#10524 ) * Add "why do you want to join" field to invite requests Fix #10512 * Remove unused translations * Fix broken registrations when no invite request text is submitted	6 years ago
ThibG	cb71c95e22	Export and import show_reblogs together with following list (#10495 ) * Refactor imports * Export show_reblogs when exporting list of followed users * Add support for importing show_reblogs with following collection * Fix tests	6 years ago
Eugen Rochko	67b3b62b98	Improve blocked view of profiles (#10491 ) * Revert "Fix filtering of favourited_by, reblogged_by, followers and following (#10447)" This reverts commit `120544067f`. * Revert "Hide blocking accounts from blocked users (#10442)" This reverts commit `62bafa20a1`. * Improve blocked view of profiles - Change "You are blocked" to "Profile unavailable" - Hide following/followers in API when blocked - Disable follow button and show "Profile unavailable" on public profile as well	6 years ago
ThibG	d4882aa64a	Export and import `hide_notifications` alongside user mutes (#10335 ) * Export hide_notifications along with user mutes * Import hide_notifications along with muted users list * Add headers for CSV exports	6 years ago
ThibG	62bafa20a1	Hide blocking accounts from blocked users (#10442 ) * Revert "Add indication that you have been blocked in web UI (#10420)" This reverts commit `bd02ec6daa`. * Revert "Add `blocked_by` relationship to the REST API (#10373)" This reverts commit `9745de883b`. * Hide blocking accounts from search results * Filter blocking accouts from account followers * Filter blocking accouts from account's following accounts * Filter blocking accounts from “reblogged by” and “favourited by” lists * Remove blocking account from URL search * Return 410 on trying to fetch user data from a user who blocked us * Return 410 in /api/v1/account/statuses for suspended or blocking accounts * Fix status filtering when performing URL search * Restore some React improvements Restore some cleanup from `bd02ec6daa` * Refactor by adding `without_blocking` scope	6 years ago
ThibG	2acd8940de	Fix more keybase-related test failures (#10443 )	6 years ago
slice	85973f4f37	Improvements to image upload validation and creation (#10431 ) * Check if image value is nil? before creating an image Check if uploaded images aren't nil before creating SiteUpload models for them. * Validate presence of file in SiteUpload * Fix file presence validation * Fabricate SiteUpload#file * Add link to Creative Commons license	6 years ago
ThibG	abecaba317	Fix failing keybase-related test (#10428 )	6 years ago
Eugen Rochko	1714ea5978	Add ActivityPub representation for identity proofs (#10414 ) * Add ActivityPub representation for identity proofs * Add tests	6 years ago
Alex Gessner	69141dca26	squashed identity proof updates (#10375 )	6 years ago
Eugen Rochko	f1bc90ab50	Rename :poll to :preloadable_poll and :owned_poll to :poll on Status (#10401 ) Also, fix some n+1 queries Resolve #10365	6 years ago
Eugen Rochko	11fe293e1b	Remove unused ActivityPub `@context` values depending on response (#10378 ) Fix #8078	6 years ago
Eugen Rochko	555c4e11ba	Add validations to admin settings (#10348 ) * Add validations to admin settings - Validate correct HTML markup - Validate presence of contact username & e-mail - Validate that all usernames are valid - Validate that enums have expected values * Fix code style issue * Fix tests	6 years ago
ThibG	66d9452092	Do not try fetching keys of unknown accounts on a Delete from them (#10326 )	6 years ago
Eugen Rochko	9c4cbdbafb	Add Keybase integration (#10297 ) * create account_identity_proofs table * add endpoint for keybase to check local proofs * add async task to update validity and liveness of proofs from keybase * first pass keybase proof CRUD * second pass keybase proof creation * clean up proof list and add badges * add avatar url to keybase api * Always highlight the “Identity Proofs” navigation item when interacting with proofs. * Update translations. * Add profile URL. * Reorder proofs. * Add proofs to bio. * Update settings/identity_proofs front-end. * Use `link_to`. * Only encode query params if they exist. URLs without params had a trailing `?`. * Only show live proofs. * change valid to active in proof list and update liveness before displaying * minor fixes * add keybase config at well-known path * extremely naive feature flagging off the identity proof UI * fixes for rubocop * make identity proofs page resilient to potential keybase issues * normalize i18n * tweaks for brakeman * remove two unused translations * cleanup and add more localizations * make keybase_contacts an admin setting * fix ExternalProofService my_domain * use Addressable::URI in identity proofs * use active model serializer for keybase proof config * more cleanup of keybase proof config * rename proof is_valid and is_live to proof_valid and proof_live * cleanup * assorted tweaks for more robust communication with keybase * Clean up * Small fixes * Display verified identity identically to verified links * Clean up unused CSS * Add caching for Keybase avatar URLs * Remove keybase_contacts setting	6 years ago
ThibG	a20354a20b	Set and store report URIs (#10303 ) Fixes #10271	6 years ago
ThibG	5e38ef87a7	Fix reblogs privacy (#10302 ) * Fix reblogs privacy * Fix Announce processing specs	6 years ago
Eugen Rochko	1c113fd72d	Add relationship manager UI (#10268 )	6 years ago
ysksn	782b622f5f	Add specs for action log helper (#9605 ) * Add specs for ActionLogHelper * Make some methods private methods below never referenced from outside of their module: - #linkable_log_target - #log_target_from_history	6 years ago
Eugen Rochko	1b167707c2	Fix language detection of non-latin alphabets even at few characters (#10276 )	6 years ago
Eugen Rochko	51e154f5e8	Admission-based registrations mode (#10250 ) Fix #6856 Fix #6951	6 years ago
Eugen Rochko	65fffeac3f	Redesign landing page (#10232 )	6 years ago
Aurélien Reeves	85537b0069	Squish username before validation (#10239 ) * Squish username before validation (#10101) Fix #10101 * Move before_validation hook to a private method Also add Unicode wite-spaces to the spec to support the use of squish over strip.	6 years ago
ThibG	c11dff5049	Reject existing Follows when suspending a remote account (#10230 ) * Reject existing Follows when suspending a remote account Partial fix to #10229 * Add tests	6 years ago
ThibG	3aaac4f134	Do not allow adding votes to expired polls (#10214 ) * Do not allow adding votes to expired polls * Only validate expires_at on create	6 years ago
Eugen Rochko	0a39c81dd8	Add test ensuring that unknown object types are rejected (#10166 )	6 years ago
ThibG	833ffce2df	Store remote votes URI (#10158 ) * Store remote votes URI * Add spec for accepting remote votes * Make poll vote id generation work the same way as follows	6 years ago
Eugen Rochko	0e6998da3c	Add tests for ActivityPub poll processing (#10143 )	6 years ago
Eugen Rochko	230a012f00	Add polls (#10111 ) * Add polls Fix #1629 * Add tests * Fixes * Change API for creating polls * Use name instead of content for votes * Remove poll validation for remote polls * Add polls to public pages * When updating the poll, update options just in case they were changed * Fix public pages showing both poll and other media	6 years ago
ThibG	9d3c6f1849	Improved remote thread fetching (#10106 ) * Fetch up to 5 replies when discovering a new remote status This is used for resolving threads downwards. The originating server must add a “replies” attributes with such replies for it to be useful. * Add some tests for ActivityPub::FetchRepliesWorker * Add specs for ActivityPub::FetchRepliesService * Serialize up to 5 public self-replies for ActivityPub notes * Add specs for ActivityPub::NoteSerializer * Move exponential backoff logic to a worker concern * Fetch first page of paginated collections when fetching thread replies * Add specs for paginated collections in replies * Move Note replies serialization to a first CollectionPage The collection isn't actually paginable yet as it has no id nor a `next` field. This may come in another PR. * Use pluck(:uri) instead of map(&:uri) to improve performances * Fix fetching replies when they are in a CollectionPage	6 years ago
Eugen Rochko	e7f20cc43f	Add type, limit, offset, min_id, max_id, account_id to search API (#10091 ) * Add type, limit, offset, min_id, max_id, account_id to search API Fix #8939 * Make the offset work on accounts and hashtags search as well * Assure brakeman we are not doing mass assignment here * Do not allow paginating unless a type is chosen * Fix search query and index id field on statuses instead of created_at	6 years ago
Eugen Rochko	1a1b8170bb	Fix Announce activities of unknown statuses not fetching those statuses (#10065 ) Regression from #9998	6 years ago
Eugen Rochko	147b4c2c3a	Add logging for rejected ActivityPub payloads and add tests (#10062 )	6 years ago
Eugen Rochko	c417e8c198	Filter incoming Announce activities by relation to local activity (#10041 ) * Filter incoming Announce activities by relation to local activity Reject if announcer is not followed by local accounts, and is not from an enabled relay, and the object is not a local status Follow-up to #10005 * Fix tests	6 years ago
ThibG	6a5307a573	Alternative handling of private self-boosts (#9998 ) * When self-boosting, embed original toot into Announce serialization * Process unknown self-boosts from Announce object if it is more than an URI * Add some self-boost specs * Only serialize private toots in self-Announces	6 years ago
Franck Zoccolo	4f0322dcae	Add support for IPv6 only MXes in Email validation (#10009 ) * Add support for IPv6 only MXes * Fixed email validator tests	6 years ago
Eugen Rochko	016ad37bc8	Fix URL linkifier grabbing full-width spaces and quotations (#9997 ) Fix #9993 Fix #5654	6 years ago
Hinaloe	157d3af46c	Only URLs extract with pre-escaped text (#9991 ) * [test] add japanese hashtag testcase * Only URLs extract with pre-escaped text ( https://github.com/tootsuite/mastodon/issues/9989 )	6 years ago
Eugen Rochko	364f2ff9aa	Add featured hashtags to profiles (#9755 ) * Add hashtag filter to profiles GET /@:username/tagged/:hashtag GET /api/v1/accounts/:id/statuses?tagged=:hashtag * Display featured hashtags on public profile * Use separate model for featured tags * Update featured hashtag counters on-write * Limit featured tags to 10	6 years ago
Eugen Rochko	d14c276e58	Add option to overwrite imported data (#9962 ) * Add option to overwrite imported data Fix #7465 * Add import for domain blocks	6 years ago
Jakub Mendyk	6a5e3da6b0	Allow most kinds of characters in URL query (fixes #8408 ) (#8447 ) * Allow unicode characters in URL query strings Fixes #8408 * Alternative approach to unicode support in urls Adds PoC/idea to approch this problem.	6 years ago
ThibG	e2a5be6e9a	Prevent posting toots with media attachments from someone else (#9921 )	6 years ago
ThibG	061feb63ed	Fix scheduled toot with media immediately creating a toot (#9894 ) * Add test for not persisting status when attaching media to scheduled toot * Prevent status used for validation from being persisted to the database Fixes #9893 Thanks to tateisu for the help investigating this.	6 years ago
ThibG	aeb124491d	Reject existing Follow in addition to sending a Block (#9811 ) Mastodon expects remote servers to remove follow relationships upon receiving a Block. However, the spec only evokes Block activities in a C2S context, never in a S2S context. This PR, in addition to federating the Block, explicitly sends a Reject for any affected follow relationship, which makes a bit more sense with regards to the spec.	6 years ago
Eugen Rochko	bc642ac24b	Redesign public hashtag page to use a masonry layout (#9822 )	6 years ago
Moritz Heiber	ecf40d09ed	Disable Same-Site cookie implementation to fix SSO issues on WebKit browsers (#9819 )	6 years ago
Renato "Lond" Cerqueira	5c5e14c816	Fix undefined method error in sidekiq (#9807 ) * Fix undefined method error in sidekiq Body can be not nil but still be empty, which causes a `NoMethodError: undefined method `[]' for nil:NilClass` further in the code. This checks for an empty body to avoid the issue. * Fix codeclimate issue	6 years ago
ysksn	c059999ab3	Add a spec for Admin::ActionLog (#9775 )	6 years ago
ysksn	09c3c96607	Add specs for Admin::AccountAction (#9767 )	6 years ago
ysksn	61ecda1575	Not to skip executable specs (#9753 ) * Not to skip executable specs * Combine specs Combine specs to one to reduce multiple slow http post.	6 years ago
Eugen Rochko	1c6588accc	Redesign admin instances area (#9645 )	6 years ago
ysksn	9a38357111	Remove `pending` (#9752 ) Some specs have already been added.	6 years ago
ysksn	274109e9f3	Remove spec files (#9751 ) Nothing to test.	6 years ago
ysksn	88deca16ca	Add pending specs for jsonld helper (#9750 ) * Add specs for JsonLdHelper#first_of_value * Add specs for JsonLdHelper#supported_context?	6 years ago
Eugen Rochko	a49d43d112	Add scheduled statuses (#9706 ) Fix #340	6 years ago
ysksn	5efedb5d5e	Add specs for UrlValidator (#9699 )	6 years ago
ysksn	19abf4ef0b	Add specs for UnreservedUsernameValidator (#9698 ) * Add specs for UnreservedUsernameValidator * Use instance variable	6 years ago
Eugen Rochko	66436d0895	Improve e-mail digest (#9689 ) - Reduce time-to-digest from 20 to 7 days - Fetch mentions starting from +1 day since last login - Fix case when last login is more recent than last e-mail - Do not render all mentions, only 40, but show number in subject - Do not send digest to moved accounts - Do send digest to silenced accounts	6 years ago
ThibG	70be301d69	Ensure blocked user unfollows blocker if Block/Undo Block are processed out of order (#9687 ) * Ensure blocked user unfollows blocker if Block/Undo Block are processed out of order * Add specs for Block causing unfollow and for out-of-order Block + Undo	6 years ago
ThibG	290932602b	Reduce usage of LD signatures (#9659 ) * Do not LDS-sign Follow, Accept, Reject, Undo, Block * Do not use LDS for Create activities of private toots * Minor cleanup * Ignore unsigned activities instead of misattributing them * Use status.distributable? instead of querying visibility directly	6 years ago
ysksn	fb08039de5	Add specs for FollowLimitValidator (#9655 )	6 years ago
ysksn	05edec6917	Add specs for BlackListedEmailValidator (#9651 ) * Add specs for BlackListedEmailValidator * Use instance variable	6 years ago
ysksn	4725aeec9f	Add specs for DisallowedHashtagsValidator (#9653 ) In order to implement tests easier, `#select_tags` created.	6 years ago
Eugen Rochko	0f938ff29c	Add handler for Move activity (#9629 )	6 years ago
ysksn	d01c840e14	Add specs for StatusPinValidator (#9648 )	6 years ago
ysksn	ccb9c1b952	Add pending specs for StatusLengthValidator (#9647 ) * Add pending specs of StatusLengthValidator * Use instance variable	6 years ago
Eugen Rochko	5d2fc6de32	Add REST API for creating an account (#9572 ) * Add REST API for creating an account The method is available to apps with a token obtained via the client credentials grant. It creates a user and account records, as well as an access token for the app that initiated the request. The user is unconfirmed, and an e-mail is sent as usual. The method returns the access token, which the app should save for later. The REST API is not available to users with unconfirmed accounts, so the app must be smart to wait for the user to click a link in their e-mail inbox. The method is rate-limited by IP to 5 requests per 30 minutes. * Redirect users back to app from confirmation if they were created with an app * Add tests * Return 403 on the method if registrations are not open * Require agreement param to be true in the API when creating an account	6 years ago
ThibG	5f387995d9	Limit maximum visibility of local silenced users to unlisted (#9583 ) Fixes #9580	6 years ago
Eugen Rochko	3c033c4352	Add moderation warnings (#9519 ) * Add moderation warnings Replace individual routes for disabling, silencing, and suspending a user, as well as the report update route, with a unified account action controller that allows you to select an action (none, disable, silence, suspend) as well as whether it should generate an e-mail notification with optional custom text. That notification, with the optional custom text, is saved as a warning. Additionally, there are warning presets you can configure to save time when performing the above. * Use Account#local_username_and_domain	6 years ago
ysksn	eee2b05ea2	Add specs for CustomEmojiFilter (#9599 )	6 years ago
ysksn	de3cecf37a	Add specs for AdminMailer (#9597 )	6 years ago
ysksn	1bc78ec50e	Add specs for InstancePresenter (#9596 )	6 years ago
ysksn	6a2d030c2f	Add specs for ReportNotePolicy (#9592 )	6 years ago
ysksn	b93e317886	Add specs for policies (#9591 ) * Add spec for RelayPolicy * Add specs for SubscriptionPolicy * Add specs for SettingsPolicy * Add specs for TagPolicy * Add specs for ReportPolicy	6 years ago
ysksn	be9640bfc2	Add specs for UserPolicy (#9593 )	6 years ago
ysksn	d649d84594	Add specs for InvitePolicy (#9589 )	6 years ago
ysksn	44189c33d1	Add specs for EmailDomainBlockPolicy (#9586 )	6 years ago
ysksn	08cb8a1ff3	Add specs for InstancePolicy (#9587 )	6 years ago
ysksn	e181f99739	Add specs for DomainBlockPolicy (#9585 )	6 years ago
ysksn	5088213f5e	Add specs for CustomEmojiPolicy (#9584 )	6 years ago

1 2 3 4 5 ...

1048 Commits (bdca8da8ebb133f9f2a01cd4881a2fc3f6852274)