78 Commits (d6a7d62dc698d6ebaa3a40f44c20ef12f8474fd7)

Author	SHA1	Message	Date
Thibaut Girka	d6a7d62dc6	Do not share a single Redcarpet::Markdown object across threads ... There are apparently thread-safety issues: https://github.com/vmg/redcarpet/pull/672	6 years ago
Thibaut Girka	2332b3f146	Fix local text/html toots not being sanitized	6 years ago
Thibaut Girka	9ca21e93cc	Minor optimization	6 years ago
Thibaut Girka	dd5bf40b97	Properly escape HTML in code blocks	6 years ago
Thibaut Girka	0be93820f3	Fix autolinking, and newlines in code blocks ... Autolinking is now performed *after* the Markdown pass, by replacing HTML tags with zero-width spaces and running the twitter-text extractor as usual, except it does not auto-link URLs to avoid links in links…	6 years ago
Thibaut Girka	d7520f8175	Add support for HTML-formatted toots	6 years ago
Thibaut Girka	94aef563b9	Add support for markdown-formatted toots	6 years ago
ThibG	c1c8c7b2c8	Minor performance improvements and cleanup in formatter (#10765)	6 years ago
Eugen Rochko	f1bc90ab50	Rename :poll to :preloadable_poll and :owned_poll to :poll on Status (#10401) ... Also, fix some n+1 queries Resolve #10365	6 years ago
ThibG	80f0910e21	Add support for custom emojis in poll options (#10322) ... * Backend changes for custom emoji support in poll options * Serialize poll emojis in REST API * Render custom emojis in poll options * Render custom emoji in poll options on public pages	6 years ago
ThibG	efd0fb8088	Fix newlines in OStatus and RSS serializations (#10183)	6 years ago
ThibG	636db1f54f	When serializing polls over OStatus, serialize poll options to text (#10160) ... * When serializing polls over OStatus, serialize poll options to text * Do the same for RSS feeds * Use “[ ] ” as a prefix for poll options instead of “- ”	6 years ago
Eugen Rochko	016ad37bc8	Fix URL linkifier grabbing full-width spaces and quotations (#9997) ... Fix #9993 Fix #5654	6 years ago
Hinaloe	157d3af46c	Only URLs extract with pre-escaped text (#9991) ... * [test] add japanese hashtag testcase * Only URLs extract with pre-escaped text ( https://github.com/tootsuite/mastodon/issues/9989 )	6 years ago
Jakub Mendyk	6a5e3da6b0	Allow most kinds of characters in URL query (fixes #8408) (#8447) ... * Allow unicode characters in URL query strings Fixes #8408 * Alternative approach to unicode support in urls Adds PoC/idea to approch this problem.	6 years ago
Eugen Rochko	8069fd636b	Remove intermediary arrays when creating hash maps from results (#9291)	7 years ago
Eugen Rochko	ddd30f331c	Improve support for aspects/circles (#8950) ... * Add silent column to mentions * Save silent mentions in ActivityPub Create handler and optimize it Move networking calls out of the database transaction * Add "limited" visibility level masked as "private" in the API Unlike DMs, limited statuses are pushed into home feeds. The access control rules between direct and limited statuses is almost the same, except for counter and conversation logic * Ensure silent column is non-null, add spec * Ensure filters don't check silent mentions for blocks/mutes As those are "this person is also allowed to see" rather than "this person is involved", therefore does not warrant filtering * Clean up code * Use Status#active_mentions to limit returned mentions * Fix code style issues * Use Status#active_mentions in Notification And remove stream_entry eager-loading from Notification	7 years ago
Eugen Rochko	21ad21cb50	Improve signature verification safeguards (#8959) ... * Downcase signed_headers string before building the signed string The HTTP Signatures draft does not mandate the “headers” field to be downcased, but mandates the header field names to be downcased in the signed string, which means that prior to this patch, Mastodon could fail to process signatures from some compliant clients. It also means that it would not actually check the Digest of non-compliant clients that wouldn't use a lowercased Digest field name. Thankfully, I don't know of any such client. * Revert "Remove dead code (#8919)" This reverts commit a00ce8c92c. * Restore time window checking, change it to 12 hours By checking the Date header, we can prevent replaying old vulnerable signatures. The focus is to prevent replaying old vulnerable requests from software that has been fixed in the meantime, so a somewhat long window should be fine and accounts for timezone misconfiguration. * Escape users' URLs when formatting them Fixes possible HTML injection * Escape all string interpolations in Formatter class Slightly improve performance by reducing class allocations from repeated Formatter#encode calls * Fix code style issues	7 years ago
Renato "Lond" Cerqueira	fe56d26f7b	Fix autoplay issue with spoiler tag (#8540) ... Add tests to avoid similar issues in the future	7 years ago
Renato "Lond" Cerqueira	11658d8653	Add animate custom emoji param to embed pages (#8507) ... * Add animate custom emoji param to embed pages * Rename param, use it for avatars and gifs * Fix issues pointed by codeclimate and breaking test * Ignore brakeman warning	7 years ago
Eugen Rochko	61a9018607	Enable custom emojis in profiles (notes, field values, display names) (#7374) ... Follow-up to #6124	7 years ago
Eugen Rochko	a872392cd9	Add entity cache (#7271) ... * Add entity cache Use a caching layer for mentions and custom emojis that are dynamically extracted from text. Reduce duplicate text extractions * Fix code style issue	7 years ago
Eugen Rochko	78ed4ab75f	Add bio fields (#6645) ... * Add bio fields - Fix #3211 - Fix #232 - Fix #121 * Display bio fields in web UI * Fix output of links and missing fields * Federate bio fields over ActivityPub as PropertyValue * Improve how the fields are stored, add to Edit profile form * Add rel=me to links in fields Fix #121	7 years ago
David Underwood	123a343d11	[WIP] Enable custom emoji on account pages and in the sidebar (#6124) ... Federate custom emojis with accounts	7 years ago
Eugen Rochko	cfa9b6e13a	Remove text requirement when media attached from statuses (#6672)	7 years ago
ThibG	a8b51124ba	Don't normalize URLs in toots (#6134) ... * Don't normalize URLs in toots URL normalization is ill-defined and may cause certain links to break. * Change specs since we are not normalizing user-provided URLs	7 years ago
Yamagishi Kazutoshi	b21db9bbde	Using double splat operator (#5859)	8 years ago
Eugen Rochko	4c6b5dbe96	Add semi-support for Video/Image objects in ActivityPub (#5848) ... * Add semi-support for Video/Image objects in ActivityPub Video and Image objects will create corresponding status records with manually crafted text contents (title + URL) * Extract html-url-finding logic into JsonLdHelper * Fallback to id when url missing, extract supported object types	8 years ago
MIYAGI Hikaru	782224c991	Avoid emojifying on invisible text (#5558)	8 years ago
unarist	d8b2f89d33	Fix remote profile being displayed in HTML on remote_follow (#5249)	8 years ago
Eugen Rochko	b9c76e2edb	When processing custom emoji, ensure a non-animated version exists (#5230) ... Use the non-animated version in web UI, but return both in API	8 years ago
Eugen Rochko	9c8e602163	Fix custom emojis not detected when used in content warning (#5049)	8 years ago
Naoki Kosaka	df1ce2350c	Fix non-local statuses are html_encoded in public_page. (#5012)	8 years ago
Eugen Rochko	81cec35dbf	Custom emoji (#4988) ... * Custom emoji - In OStatus: `<link rel="emoji" name="coolcat" href="http://..." />` - In ActivityPub: `{ type: "Emoji", name: ":coolcat:", href: "http://..." }` - In REST API: Status object includes `emojis` array (`shortcode`, `url`) - Domain blocks with reject media stop emojis - Emoji file up to 50KB - Web UI handles custom emojis - Static pages render custom emojis as `<img />` tags Side effects: - Undo #4500 optimization, as I needed to modify it to restore shortcode handling in emojify() - Formatter#plaintext should now make sure stripped out line-breaks and paragraphs are replaced with newlines * Fix emoji at the start not being converted	8 years ago
unarist	ec36df97c4	Escape URL parts on formatting local status (#4975)	8 years ago
ふぁぼ原	3816943e6b	Enable to recognize most kinds of characters as URL paths (#4941)	8 years ago
TheKinrar	9ba7d526a0	Don't normalize invalid domain names (#4499) ... Fixes #4496	8 years ago
Akihiko Odaki (@fn_aki@pawoo.net)	c7af8cbc90	Remove some arguments of Formatter.instance.format and spec (#3541) ... * Remove some arguments of Formatter.instance.format * Improve spec for Formatter	8 years ago
Eugen Rochko	b5a9c6b3d2	Prepend reblogs' wrapper content with "RT @original_author", (#3013) ... so that when a reblog parse fails on another instance, it doesn't look like a misattributed/stolen text	8 years ago
Eugen Rochko	72698bc3b4	Fix regressions from #2683 (#2970) ... * Fix regressions from #2683 Properly format spoiler text HTML, while keeping old logic for blankness intact Process hashtags and mentions in spoiler text Format spoiler text for Atom Change "show more" toggle into a button instead of anchor Fix style regression on dropdowns for detailed statuses * Fix lint issue * Convert spoiler text to plaintext in desktop notifications	8 years ago
beatrix	57a3d71c90	fix a regression introduced by e2491680e6 (#2966) ... that caused user pages to break when showing toots with CWs	8 years ago
R Tucker	e2491680e6	Handle hashtags in spoiler_texts (partial fix for #699) (#2683) ... * services: scan spoiler_text for hashtags (#699) * views: link hashtags from spoiler_texts This covers linking hashtags from within the spoiler text on the server-generated pages. * services: fix string concat going into hashtag RE Cleaner Ruby syntax, may handle immutable strings better	8 years ago
abcang	08e94d1b19	Fixed bug that timeline can not be displayed by InvalidURIError (#2947)	8 years ago
masarakki	d08f1112d5	use Twitter::Extractor for creating links (#2502)	8 years ago
Eugen Rochko	7406404fa3	Hotfix remote status formatting (#2543)	8 years ago
Eugen Rochko	88725d6ce8	OEmbed support for PreviewCard (#2337) ... * OEmbed support for PreviewCard * Improve ProviderDiscovery code failure treatment * Do not crawl links if there is a content warning, since those don't display a link card anyway * Reset db schema * Fresh migrate * Fix rubocop style issues Fix #1681 - return existing access token when applicable instead of creating new * Fix test * Extract http client to helper * Improve oembed controller	8 years ago
Yamagishi Kazutoshi	3ea5b948a4	Decodes URL containing IDN (#2436)	8 years ago
178inaba	1244630ab4	Add simple_format to simplified_format (#2198)	8 years ago
Mingye Wang	5c9aa2b732	Fix mangling of ##tag matches (#2194) (#2247) ... This commit fixes hashtag_html so it correctly handles matches with multiple hash-signs. Bug located by @over9001, initial fix suggested by @nightpool.	8 years ago
abcang	70891a99a9	Fix html escape characters in the URL (#2138) ... * fix character escaping in URL * add tests * put a comma after the last item * add HTML escape test	8 years ago