Commit Graph

191 Commits (e62baacfc11508eb1d2ac1c1bcc3c4bd615d940b)

Author SHA1 Message Date
Claire 0219b7cad7
Add `result_count` to `Mastodon-Async-Refresh` header when needed (#36239) 2 months ago
Claire 150f0fcba5
Add support for numeric-based URIs for local accounts (#32724) 2 months ago
Claire e1f7847b64
Remove the `outgoing_quotes` feature flag, making the feature unconditional (#36130) 2 months ago
Claire 90765342a3
Fix posts when omitting quote policy and default policy is `nobody` (#36158) 2 months ago
Jeong Arm 3055afd1d2
Fix applying user's default quote policy if API parameter is not specified (#36132) 2 months ago
Claire 6c5a4702d9
Use default quote policy setting in the absence of API parameter (#36094) 2 months ago
Claire 2648bbdc51
Add `PUT /api/v1/statuses/:status_id/interaction_policy` (#35769) 3 months ago
Matt Jankowski 5ee83a680b
Update stoplight to version 5.3.1 (#35129) 4 months ago
Matt Jankowski b19131202f
Extract constants for captcha directives/sources (#35439) 4 months ago
David Roetzel 8ee6cee36e
Better error response to malformed headers (#35278) 5 months ago
Claire 68b05e994f
Fix error on log-in from old users requiring ToS interstitial when said ToS has been removed (#35233) 5 months ago
David Roetzel 0ec6c26af3
Fix error when RFC9421 signatures are used (#35109) 5 months ago
David Roetzel 83d5016ca3
Re-instate rescuing signature errors (#35033) 6 months ago
David Roetzel 319fbbbfac
Experimental Async Refreshes API (#34918) 6 months ago
David Roetzel 9c80b16401
Accept HTTP Message Signatures (RFC9421) (#34814) 6 months ago
Claire 8cc5084ca1
Add interstitial for Terms of Service updates (#34527) 6 months ago
Claire 22ec828951
Change `DEFAULT_LOCALE` to not override unauthenticated users' browser language (#34535) 7 months ago
David Roetzel e2ef173b82
Refactoring: Move `SignatureVerificationError` into `Mastodon` namespace (#34342) 8 months ago
Claire 38f5e74122
Add `Deprecation` headers on deprecated endpoints (#34262)
Co-authored-by: Damien Mathieu <42@dmathieu.com>
8 months ago
Claire db59f37269
Fix redirect after log-in when `allow_referrer_origin` setting is enabled (#33903) 10 months ago
Claire 5b291fcbe4
Fix incorrect signature after HTTP redirect (#33757) 10 months ago
Matt Jankowski 93f3c724ae
Use `expect` in remaining controller locations (#33748) 10 months ago
Matt Jankowski d3b637c757
Use `expect` in `Admin::ExportControllerConcern` import params (#33745) 10 months ago
Claire ea9b10d112
Fix error 500 when passing an invalid `lang` parameter (#33467) 11 months ago
Renaud Chaput 2a369a8977
Use a system setting for the Referer policy (#33239) 12 months ago
Matt Jankowski 6efa320feb
Fix `Style/SafeNavigation` cop (#32970) 1 year ago
Matt Jankowski 297ce9ef44
Move body class to shared partial for web app controller concern views (#31797) 1 year ago
Matt Jankowski 97b18d10b4
Move hcaptcha service config to `config_for` yml (#30662) 1 year ago
Matt Jankowski 258dce1256
Add `OpenSSL::SSL::SSLError` to http connection errors wrapper (#32307) 1 year ago
Matt Jankowski e8ec6667bd
Extract wrapper constant for `HTTP::*` error classes (#32285) 1 year ago
Claire 49407e7623
Fix Content-Security-Policy when using sso-redirect (#32241) 1 year ago
Renaud Chaput 3dc4ddc663
Fix search params being dropped when redirected to non-deck path (#31984) 1 year ago
Claire a496aeabcb
Change form-action Content-Security-Policy directive to be more restrictive (#26897) 1 year ago
Matt Jankowski 7efe0bde9d
Add `have_http_link_header` matcher and set header values as strings (#31010) 1 year ago
Claire 2ec1181ee5
Fix contrast between background and form elements on some pages (#31266) 1 year ago
Matt Jankowski 85d9053b36
Move `pagination_params` into `API::BaseController` (#28845) 2 years ago
Matt Jankowski 65e82211cd
Rename `cache_*` methods to `preload_*` in controller concern (#30209) 2 years ago
Matt Jankowski 1d3ecd3fba
Add `API::Pagination` concern (#28826) 2 years ago
Claire babbf6017d
Remove caching in `cache_collection` (#29862) 2 years ago
Matt Jankowski edde54e991
Update stoplight to version 4.1.0 (#28366) 2 years ago
Matt Jankowski f9100743ec
Add `Api::ErrorHandling` concern for api/base controller (#29574) 2 years ago
Claire 7efc33b909
Move HTTP Signature parsing code to its own class (#28932) 2 years ago
Claire 1726085db5
Merge pull request from GHSA-3fjr-858r-92rw
* Fix insufficient origin validation

* Bump version to 4.3.0-alpha.1
2 years ago
Eugen Rochko b19ae521b7
Add confirmation when redirecting logged-out requests to permalink (#27792)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
Claire 3593ee2e36
Add rate-limit of TOTP authentication attempts at controller level (#28801) 2 years ago
Jean Boussier 5a6d533c53
Enable Rails 7.1 Marshalling format (#28609) 2 years ago
Claire 092bb8a27a
Fix Mastodon not correctly processing HTTP Signatures with query strings (#28476) 2 years ago
Claire 963354978a
Add `Account#unavailable?` and `Account#permanently_unavailable?` aliases (#28053) 2 years ago
Matt Jankowski 1f1c75bba5
File cleanup/organization in `controllers/concerns` (#27846) 2 years ago
Matt Jankowski 291dc04e67
Remove un-needed `action` and `template` options to `render` in controllers (#28022) 2 years ago