You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
mastodon/app/controllers
Claire 4fb4721072
Merge pull request from GHSA-58x8-3qxw-6hm7
* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
1 year ago
..
activitypub Refactor `Cache-Control` and `Vary` definitions (#24347) 2 years ago
admin Fix missing destory audit logs for Domain Allows (#30125) 1 year ago
api Merge pull request from GHSA-58x8-3qxw-6hm7 1 year ago
auth Fix user creation failure handling in OAuth paths (#29207) 1 year ago
concerns Remove caching in `cache_collection` (#29862) 1 year ago
disputes Refactor `Cache-Control` and `Vary` definitions (#24347) 2 years ago
filters Refactor `Cache-Control` and `Vary` definitions (#24347) 2 years ago
oauth Merge pull request from GHSA-vp5r-5pgw-jwqx 1 year ago
settings Add new public status index (#26344) 2 years ago
well_known Add fallback redirection when getting a webfinger query `WEB_DOMAIN@WEB_DOMAIN` (#28592) 1 year ago
about_controller.rb Change logged-out WebUI HTML pages to be cached for a few seconds (#24708) 2 years ago
accounts_controller.rb Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252) 2 years ago
application_controller.rb Add `authorized_fetch` server setting in addition to env var (#25798) 2 years ago
authorize_interactions_controller.rb Change interaction modal in web UI (#26075) 2 years ago
backups_controller.rb Storage: add :azure to remaining callers (#26080) 2 years ago
custom_css_controller.rb Refactor `Cache-Control` and `Vary` definitions (#24347) 2 years ago
emojis_controller.rb Refactor `Cache-Control` and `Vary` definitions (#24347) 2 years ago
filters_controller.rb Fix Rails/ActionOrder cop (#24692) 2 years ago
follower_accounts_controller.rb Fix Vary headers not being set on some redirects (#27272) 2 years ago
following_accounts_controller.rb Fix Vary headers not being set on some redirects (#27272) 2 years ago
health_controller.rb Change health check (#15988) 4 years ago
home_controller.rb Change logged-out WebUI HTML pages to be cached for a few seconds (#24708) 2 years ago
instance_actors_controller.rb Fix /actor needlessly reading session cookie and varying on Signature (#24664) 2 years ago
intents_controller.rb Fix Performance/DeletePrefix cop (#24796) 2 years ago
invites_controller.rb Refactor `Cache-Control` and `Vary` definitions (#24347) 2 years ago
mail_subscriptions_controller.rb Add List-Unsubscribe email header (#26085) 2 years ago
manifests_controller.rb Fix some user-independent endpoints potentially reading session cookies (#24650) 2 years ago
media_controller.rb Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252) 2 years ago
media_proxy_controller.rb Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252) 2 years ago
privacy_controller.rb Change logged-out WebUI HTML pages to be cached for a few seconds (#24708) 2 years ago
relationships_controller.rb Fix call to inefficient `delete_matched` cache method in domain blocks (#28367) 2 years ago
remote_interaction_helper_controller.rb Change interaction modal in web UI (#26075) 2 years ago
shares_controller.rb Fix blurhash and autoplay not working on public pages (#11585) 6 years ago
statuses_cleanup_controller.rb Refactor `Cache-Control` and `Vary` definitions (#24347) 2 years ago
statuses_controller.rb Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252) 2 years ago
tags_controller.rb Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252) 2 years ago